PT-2014-3434

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform JBEAP version 6.2.0 JBoss WildFly Application Server affected versions not specified Description The issue arises when the software is run under a security manager, as it fails to properly restrict...

CVE-2014-0018: Undefined Security Weakness

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...