Design/Logic Flaw

2014-04-2213:06:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.7%

JSON

JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
jboss_fuse_service_workseq6.0
jboss_overlord_run_time_governanceeq1.0

CPE	Name	Operator	Version
	jboss_fuse_service_works	eq	6.0
	jboss_overlord_run_time_governance	eq	1.0

References

secunia.com/advisories/57843

bugzilla.redhat.com/show_bug.cgi?id=1051279