CVE-2014-0248
mediumPriorität · verfolgen · 28EPSS 0.035 · 89. PerzentilEUUSEPSS · bewertet 2026-10-27
org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRed Hat JBoss Web Framework Kit 2.5redhat_csaf
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing installation of Red Hat JBoss Web Framework Kit. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2014:0785 - BehobenRed Hat JBoss Web Platform 5.2redhat_csaf
The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing JBoss Enterprise Web Platform installation (including all applications and configuration files).
https://access.redhat.com/errata/RHSA-2014:0791 - Behobenjboss-seam2-0:2.2.6.EAP5-12.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Web Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2014:0792 - Behobenjboss-seam2-0:2.2.6.EAP5-12.ep5.el5.src as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Web Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2014:0792 - Behobenjboss-seam2-0:2.2.6.EAP5-16.el6_5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Web Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2014:0792 - Behobenjboss-seam2-0:2.2.6.EAP5-16.el6_5.src as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Web Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2014:0792 - Behobenjboss-seam2-docs-0:2.2.6.EAP5-12.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Web Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2014:0792 - Behobenjboss-seam2-docs-0:2.2.6.EAP5-16.el6_5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Web Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2014:0792 - Behobenjboss-seam2-examples-0:2.2.6.EAP5-12.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Web Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2014:0792 - Behobenjboss-seam2-examples-0:2.2.6.EAP5-16.el6_5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Web Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2014:0792 - Behobenjboss-seam2-runtime-0:2.2.6.EAP5-12.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Web Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2014:0792 - Behobenjboss-seam2-runtime-0:2.2.6.EAP5-16.el6_5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Web Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2014:0792 - Behobenjboss-seam2-0:2.2.6.EAP5-10.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-0:2.2.6.EAP5-10.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-0:2.2.6.EAP5-10.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-0:2.2.6.EAP5-10.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-0:2.2.6.EAP5-12.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-0:2.2.6.EAP5-12.ep5.el5.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-0:2.2.6.EAP5-16.el6_5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-0:2.2.6.EAP5-16.el6_5.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-docs-0:2.2.6.EAP5-10.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-docs-0:2.2.6.EAP5-10.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-docs-0:2.2.6.EAP5-12.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-docs-0:2.2.6.EAP5-16.el6_5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-examples-0:2.2.6.EAP5-10.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-examples-0:2.2.6.EAP5-10.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-examples-0:2.2.6.EAP5-12.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-examples-0:2.2.6.EAP5-16.el6_5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-runtime-0:2.2.6.EAP5-10.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-runtime-0:2.2.6.EAP5-10.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-runtime-0:2.2.6.EAP5-12.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - Behobenjboss-seam2-runtime-0:2.2.6.EAP5-16.el6_5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing Red Hat JBoss Enterprise Application Platform 5 installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0793 - BehobenRed Hat JBoss Enterprise Application Platform 5.2redhat_csaf
The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing JBoss Enterprise Application Platform installation (including all applications and configuration files).
https://access.redhat.com/errata/RHSA-2014:0794
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (47)
Betroffene Produkte und Versionsbereiche.
- redhat jboss enterprise application platform= 5.2.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise web platform= 5.2.0nvdUScpe:2.3:a:redhat:jboss_enterprise_web_platform:*:*:*:*:*:*:*:*
- Red Hat JBoss Enterprise Application Platform 5.2alle Versionenfixedredhat_csafUScpe:/a:redhat:jboss_enterprise_application_platform:5.2.0
- Red Hat JBoss Web Framework Kit 2.5alle Versionenfixedredhat_csafUScpe:/a:redhat:jboss_enterprise_web_framework:2.5.0
- Red Hat JBoss Web Platform 5.2alle Versionenfixedredhat_csafUScpe:/a:redhat:jboss_enterprise_web_platform:5.2.0
Advisories (5)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2014:0785Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.5.0 security update2014-06-23csaf · redhat_csafUS
An update for the Seam component of Red Hat JBoss Web Framework Kit 2.5.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2014:0791Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update2014-06-25csaf · redhat_csafUS
An update for Red Hat JBoss Enterprise Web Platform 5.2.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2014:0792Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update2014-06-25csaf · redhat_csafUS
Updated packages for Red Hat JBoss Enterprise Web Platform 5.2.0 that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2014:0793Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update2014-06-25csaf · redhat_csafUS
Updated packages for Red Hat JBoss Enterprise Application Platform 5.2.0 that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2014:0794Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update2014-06-25csaf · redhat_csafUS
An update for Red Hat JBoss Enterprise Application Platform 5.2.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (38)
Externe Belege — Patches, Meldungen, Analysen.
- http://rhn.redhat.com/errata/RHSA-2014-0785.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2014-0791.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2014-0792.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2014-0793.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2014-0794.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2015-1888.htmlcnnvd
- http://secunia.com/advisories/59346cnnvd
- http://secunia.com/advisories/59554cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan