Design/Logic Flaw

2014-02-1415:55:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

JSON

Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.

CPENameOperatorVersion
jboss_operations_networkeq3.0
jboss_operations_networkle2.4.1
jboss_operations_networkeq2.3.1
jboss_operations_networkeq2.4
jboss_operations_networkeq2.0.1
jboss_operations_networkeq2.1.0
jboss_operations_networkeq2.3
jboss_operations_networkeq2.0.0
jboss_operations_networkeq2.2

Name	Operator	Version
jboss_operations_network	eq	3.0
jboss_operations_network	le	2.4.1
jboss_operations_network	eq	2.3.1
jboss_operations_network	eq	2.4
jboss_operations_network	eq	2.0.1
jboss_operations_network	eq	2.1.0
jboss_operations_network	eq	2.3
jboss_operations_network	eq	2.0.0
jboss_operations_network	eq	2.2