Lucene search
RootSSV:60624HistoryFeb 03, 2013 - 12:00 a.m.
JBoss Enterprise Application Platform 多个安全绕过漏洞(CVE-2012-0874)
2013-02-0300:00:00
Root
www.seebug.org
60
0.058 Low
EPSS
Percentile
92.6%
Bugtraq ID:57552
CVE ID:CVE-2012-0874
JBOSS是一个基于J2EE的开放源代码的应用服务器。
在某些配置下，允许对JMXInvokerHAServlet和EJBInvokerHAServlet invoker servlet进行未验证访问。安全拦截器第二层验证可防止直接利用此漏洞，但是如果拦截器错误配置或不正确禁用，可导致任意代码执行。
0
Red Hat JBoss Enterprise Web Platform for RHEL 5 Server 5
Red Hat JBoss Enterprise Web Platform for RHEL 4ES 5
Red Hat JBoss Enterprise Web Platform for RHEL 4AS 5
Red Hat JBoss Enterprise Application Platform for RHEL 5 Server 5
Red Hat JBoss Enterprise Application Platform for RHEL 4ES 5
Red Hat JBoss Enterprise Application Platform for RHEL 4AS 5
厂商解决方案
用户可参考如下厂商提供的安全公告获得补丁信息：
http://rhn.redhat.com/errata/RHSA-2013-0194.html
Related
checkpoint_advisories
checkpoint_advisories
prion
prion
Design/Logic Flaw
2013-02-05 23:55:00
Design/Logic Flaw
2013-09-16 13:01:00
securityvulns
securityvulns
cve
cve
CVE-2012-0874
2013-02-05 23:55:00
CVE-2013-4810
2013-09-16 13:01:00
nessus
nessus
JBoss Java Object Deserialization RCE
2015-12-10 00:00:00
Apache Tomcat / JBoss EJBInvokerServlet / JMXInvokerServlet Multiple Vulnerabilities
2013-10-14 00:00:00
RHEL 6 : JBoss EAP (RHSA-2013:0191)
2013-01-24 00:00:00
openvas
openvas
attackerkb
attackerkb
CVE-2013-4810
2013-09-16 00:00:00
threatpost
threatpost
SpeakUp Linux Backdoor Sets Up for Major Attack
2019-02-04 14:00:15
redhat
redhat
(RHSA-2013:0533) Important: JBoss Enterprise SOA Platform 5.3.1 update
2013-02-20 00:00:00
(RHSA-2013:0221) Important: JBoss Enterprise BRMS Platform 5.3.1 update
2013-01-31 00:00:00
veracode
veracode
Privilege Escalation
2019-05-02 04:46:55
Weak Authentication
2019-05-02 04:46:21
Information Disclosure
2019-05-02 04:46:19
