CVEvulnerability

CVE-2014-3518

6.8 MEDIUM Published 2014-07-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA Platform 5.3.1, does not properly implement the JSR 160 specification, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

• redhat jboss enterprise application platform 5.2.0 • redhat jboss enterprise brms platform 5.3.1 • redhat jboss enterprise portal platform 5.2.2 • redhat jboss enterprise soa platform 5.3.1

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References