CVE-2015-0297
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:P/A:C
7.8 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.1%
Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:jboss_operations_network | redhat jboss operations network | eq | 3.3.1 |
Related
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:P/A:C
7.8 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.1%