PT-2017-6528

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP versions prior to 6.4.1 Description The issue allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled. Thi...

CVE-2015-1849: Exposure of Sensitive Information to an Unauthorized Actor

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...

Important: Red Hat Security Advisory: Red Hat Mobile Application Platform security update

An update is now available for Red Hat Mobile Application Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update

An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Red Hat JBoss Enterprise Application Platform Information Disclosure Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. A security vulnerability exists in Red Hat JBoss EAP version 7...

CVE-2016-6311

Get requests in JBoss Enterprise Application Platform EAP 7 disclose internal IP addresses to remote attackers...

CVE-2016-6311

Get requests in JBoss Enterprise Application Platform EAP 7 disclose internal IP addresses to remote attackers...

PT-2017-8959

Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform EAP version 7 Description The issue allows GET requests to disclose internal IP addresses to remote attackers. Recommendations For JBoss Enterprise Application Platform EAP version 7, update to a version...

CVE-2016-6311: Exposure of Sensitive Information to an Unauthorized Actor

Get requests in JBoss Enterprise Application Platform EAP 7 disclose internal IP addresses to remote attackers...

Unspecified Remote Elevation of Privilege Vulnerability in IBM TRIRIGA Application Platform (CNVD-2017-25612)

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

CVE-2017-1374

Sensitive data can be exposed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 that can lead to an attacker gaining unauthorized access to the system. IBM X-Force ID: 126867...

CVE-2017-1371

Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute Builder tool actions they do not have access to. IBM X-Force ID: 126864...

Cross site scripting

IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1371

Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute Builder tool actions they do not have access to. IBM X-Force ID: 126864...

CVE-2017-1372

IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1373

Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...

CVE-2017-1372

CVE-2017-1372 affects IBM TRIRIGA Application Platform 3.3.0–3.5.2.x. The issue is a cross-site scripting vulnerability in the Web UI caused by insufficient input filtering, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials in a trusted session. IBM remediati...

CVE-2017-1374

IBM TRIRIGA Application Platform is affected by CVE-2017-1374 through information disclosure across multiple 3.x releases. Affected versions include 3.3.0–3.3.2.x, 3.4.0–3.4.2.x, and 3.5.0–3.5.2.x. The vulnerability allows sensitive data exposure potentially leading to unauthorized access. Remedi...

CVE-2017-1371

CVE-2017-1371 affects the IBM TRIRIGA Application Platform, with privilege-escalation in the Administrator/Builder tools. The IBM Security Bulletin identifies affected versions: 3.3.0–3.3.2.5, 3.4.0–3.4.2.5, and 3.5.0–3.5.2.2; a fix is available in the patches 3.3.2.6, 3.4.2.6, and 3.5.2.3. The C...

PT-2017-13040

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 through 3.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trust...