Lucene search

[email protected]CVE-2014-3518

HistoryJul 22, 2014 - 8:55 p.m.

CVE-2014-3518

2014-07-2220:55:01

CWE-94

[email protected]

web.nvd.nist.gov

jboss

remoting

vulnerability

jeap

brms

nvd

cve-2014-3518

8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.6%

JSON

jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA Platform 5.3.1, does not properly implement the JSR 160 specification, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

NVD

Node

redhatjboss_enterprise_application_platformMatch5.2.0

redhatjboss_enterprise_brms_platformMatch5.3.1

redhatjboss_enterprise_portal_platformMatch5.2.2

redhatjboss_enterprise_soa_platformMatch5.3.1

CPENameOperatorVersion
redhat:jboss_enterprise_application_platformredhat jboss enterprise application platformeq5.2.0
redhat:jboss_enterprise_brms_platformredhat jboss enterprise brms platformeq5.3.1
redhat:jboss_enterprise_portal_platformredhat jboss enterprise portal platformeq5.2.2
redhat:jboss_enterprise_soa_platformredhat jboss enterprise soa platformeq5.3.1

CPE	Name	Operator	Version
redhat:jboss_enterprise_application_platform	redhat jboss enterprise application platform	eq	5.2.0
redhat:jboss_enterprise_brms_platform	redhat jboss enterprise brms platform	eq	5.3.1
redhat:jboss_enterprise_portal_platform	redhat jboss enterprise portal platform	eq	5.2.2
redhat:jboss_enterprise_soa_platform	redhat jboss enterprise soa platform	eq	5.3.1

References

rhn.redhat.com/errata/RHSA-2014-0887.html

8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.6%

JSON

Related for CVE-2014-3518

prion1 cvelist1 nvd1