CVEvulnerability
CVE-2015-0297
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-04-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:C
- Weaknesses
- CWE-284
Description
Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager.
Affected configurations
• redhat jboss operations network 3.3.1
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://rhn.redhat.com/errata/RHSA-2015-0862.html Vendor Advisory
- http://www.securitytracker.com/id/1032181 www.securitytracker.com
- http://rhn.redhat.com/errata/RHSA-2015-0862.html Vendor Advisory
- http://www.securitytracker.com/id/1032181 www.securitytracker.com