Design/Logic Flaw

2014-04-0106:35:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.0%

JSON

Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce “modify resource” permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.

CPENameOperatorVersion
jboss_operations_networkle2.4.1
jboss_operations_networkeq2.3.1
jboss_operations_networkeq2.4
jboss_operations_networkeq2.0.1
jboss_operations_networkeq1.0.0
jboss_operations_networkeq2.1.0
jboss_operations_networkeq2.3
jboss_operations_networkeq2.0.0
jboss_operations_networkeq2.2

Name	Operator	Version
jboss_operations_network	le	2.4.1
jboss_operations_network	eq	2.3.1
jboss_operations_network	eq	2.4
jboss_operations_network	eq	2.0.1
jboss_operations_network	eq	1.0.0
jboss_operations_network	eq	2.1.0
jboss_operations_network	eq	2.3
jboss_operations_network	eq	2.0.0
jboss_operations_network	eq	2.2