Red Hat Security Advisory: JBoss Application Server security update
Advisory ansehen veröffentlicht 2007-04-16
Updated versions of JBoss Application Server that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2007-1354US | medium6.0 | — | ||
The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles of… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://jira.jboss.com/jira/browse/ASPATCH-172external
- http://jira.jboss.com/jira/browse/ASPATCH-175external
- http://wiki.jboss.org/wiki/Wiki.jsp?page=AccessControlForJMXConsoleexternal
- https://access.redhat.com/errata/RHSA-2007:0151self
- https://access.redhat.com/security/updates/classification/#lowexternal
- Canonical URLself
03
Behebungen (1)
- BehobenJBoss Application Server 4
Updates are available from the JBoss Customer Support Portal (CSP) at https://network.jboss.com/
https://access.redhat.com/errata/RHSA-2007:0151
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan