Privilege Escalation

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

CVE-2012-5478

CVE-2012-5478 affects JBoss Enterprise Platform components (EAP/Web Platform BRMS/SOA) prior to versions listed; the AuthorizationInterceptor fails to properly restrict access, allowing remote authenticated users to bypass role checks and perform arbitrary JMX operations via unspecified vectors. ...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 update

JBoss Enterprise Application Platform 5.2.0, which fixes multiple security issues, various bugs, and adds several enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability...