Red Hat Security Advisory: JBoss Application Server security update
view advisory published 2007-04-16
Updated versions of JBoss Application Server that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-1354US | medium6.0 | — | ||
The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles of… | ||||
02
references
External citations — patches, advisories, analysis.
- http://jira.jboss.com/jira/browse/ASPATCH-172external
- http://jira.jboss.com/jira/browse/ASPATCH-175external
- http://wiki.jboss.org/wiki/Wiki.jsp?page=AccessControlForJMXConsoleexternal
- https://access.redhat.com/errata/RHSA-2007:0151self
- https://access.redhat.com/security/updates/classification/#lowexternal
- Canonical URLself
03
remediations (1)
- FixedJBoss Application Server 4
Updates are available from the JBoss Customer Support Portal (CSP) at https://network.jboss.com/
https://access.redhat.com/errata/RHSA-2007:0151
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan