CVEvulnerability

CVE-2014-7849

4.0 MEDIUM Published 2015-02-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-02-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-264

Description

The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization conditions, which allows remote authenticated users to add, modify, and undefine otherwise restricted attributes by leveraging the Maintainer role.

Affected configurations

• redhat jboss enterprise application platform 6.2.0 • redhat jboss enterprise application platform 6.2.1 • redhat jboss enterprise application platform 6.2.2 • redhat jboss enterprise application platform 6.2.3 • redhat jboss enterprise application platform 6.2.4 • redhat jboss enterprise application platform 6.3.0 • redhat jboss enterprise application platform 6.3.1 • redhat jboss enterprise application platform 6.3.2

Related

Weakness · not in database (1)

References