Lucene search

Veracode Vulnerability DatabaseVERACODE:16078

HistoryMay 02, 2019 - 5:08 a.m.

Authorization Bypass

2019-05-0205:08:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

JSON

jbossas-welcome-content-eap is vulnerable to authorization bypass. The vulnerability exists as it does not properly verify authorization conditions, allowing remotely authenticated users to add, modify, and undefine restricted attributes by using the Maintainer role.

CPENameOperatorVersion
jboss-moduleseq1.3.3__1.Final_redhat_1.1.ep6.el6
jboss-moduleseq1.1.2__3.GA_redhat_1.ep6.el6
jboss-moduleseq1.1.3__2.GA_redhat_1.ep6.el5.1
jboss-moduleseq1.3.4__1.Final_redhat_1.1.ep6.el7
jboss-moduleseq1.3.3__1.Final_redhat_1.1.ep6.el5
jboss-moduleseq1.3.0__2.Final_redhat_2.1.ep6.el5
jboss-moduleseq1.3.0__2.Final_redhat_2.1.ep6.el6
jboss-moduleseq1.1.2__3.GA_redhat_1.ep6.el5
jboss-moduleseq1.2.2__1.Final_redhat_1.ep6.el5
jboss-moduleseq1.2.0__2.Final_redhat_1.ep6.el6

Name	Operator	Version
jboss-modules	eq	1.3.3__1.Final_redhat_1.1.ep6.el6
jboss-modules	eq	1.1.2__3.GA_redhat_1.ep6.el6
jboss-modules	eq	1.1.3__2.GA_redhat_1.ep6.el5.1
jboss-modules	eq	1.3.4__1.Final_redhat_1.1.ep6.el7
jboss-modules	eq	1.3.3__1.Final_redhat_1.1.ep6.el5
jboss-modules	eq	1.3.0__2.Final_redhat_2.1.ep6.el5
jboss-modules	eq	1.3.0__2.Final_redhat_2.1.ep6.el6
jboss-modules	eq	1.1.2__3.GA_redhat_1.ep6.el5
jboss-modules	eq	1.2.2__1.Final_redhat_1.ep6.el5
jboss-modules	eq	1.2.0__2.Final_redhat_1.ep6.el6

Rows per page:

1-10 of 42841

References

rhn.redhat.com/errata/RHSA-2015-0215.html

rhn.redhat.com/errata/RHSA-2015-0216.html

rhn.redhat.com/errata/RHSA-2015-0217.html

rhn.redhat.com/errata/RHSA-2015-0218.html

rhn.redhat.com/errata/RHSA-2015-0920.html

www.securitytracker.com/id/1031741

access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=33893&product=appplatform&version=6.3&downloadType=patches#eap63_details

access.redhat.com/security/updates/classification/#moderate

bugzilla.redhat.com/show_bug.cgi?id=1165170

bugzilla.redhat.com/show_bug.cgi?id=1179415

bugzilla.redhat.com/show_bug.cgi?id=1179418

bugzilla.redhat.com/show_bug.cgi?id=1179426

bugzilla.redhat.com/show_bug.cgi?id=1179429

bugzilla.redhat.com/show_bug.cgi?id=1179433

bugzilla.redhat.com/show_bug.cgi?id=1179436

bugzilla.redhat.com/show_bug.cgi?id=1179439

bugzilla.redhat.com/show_bug.cgi?id=1179443

bugzilla.redhat.com/show_bug.cgi?id=1181731

bugzilla.redhat.com/show_bug.cgi?id=1181734

bugzilla.redhat.com/show_bug.cgi?id=1181737

bugzilla.redhat.com/show_bug.cgi?id=1181741

bugzilla.redhat.com/show_bug.cgi?id=1181746

bugzilla.redhat.com/show_bug.cgi?id=1181749

bugzilla.redhat.com/show_bug.cgi?id=1181757

bugzilla.redhat.com/show_bug.cgi?id=1181760

bugzilla.redhat.com/show_bug.cgi?id=1181837

exchange.xforce.ibmcloud.com/vulnerabilities/100890

rhn.redhat.com/errata/RHSA-2015-0216.html

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

JSON

Related for VERACODE:16078