CVEvulnerability
CVE-2014-0005
3.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-02-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote authenticated users to read and modify the application sever configuration and state by deploying a crafted application.
Affected configurations
• redhat jboss enterprise application platform 6.2.2
• redhat jboss enterprise brms platform (<= 6.0.3)
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2014-0343.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0344.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0345.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0234.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0235.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0720.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0343.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0344.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0345.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0234.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0235.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0720.html rhn.redhat.com