Design/Logic Flaw

2014-02-1415:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.5%

JSON

Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security token.

CPENameOperatorVersion
jboss_operations_networkeq3.0
jboss_operations_networkle2.4.1
jboss_operations_networkeq2.3.1
jboss_operations_networkeq2.4
jboss_operations_networkeq2.0.1
jboss_operations_networkeq2.1.0
jboss_operations_networkeq2.3
jboss_operations_networkeq2.0.0
jboss_operations_networkeq2.2

Name	Operator	Version
jboss_operations_network	eq	3.0
jboss_operations_network	le	2.4.1
jboss_operations_network	eq	2.3.1
jboss_operations_network	eq	2.4
jboss_operations_network	eq	2.0.1
jboss_operations_network	eq	2.1.0
jboss_operations_network	eq	2.3
jboss_operations_network	eq	2.0.0
jboss_operations_network	eq	2.2