CVEvulnerability
CVE-2015-5304
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-12-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-264
Description
Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.5 does not properly authorize access to shut down the server, which allows remote authenticated users with the Monitor, Deployer, or Auditor role to cause a denial of service via unspecified vectors.
Affected configurations
• redhat jboss enterprise application platform (<= 6.4.4)
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2015-2538.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2539.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2540.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2541.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2542.html Vendor Advisory
- http://www.securitytracker.com/id/1034280 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1273046 Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2538.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2539.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2540.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2541.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2542.html Vendor Advisory
- http://www.securitytracker.com/id/1034280 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1273046 Vendor Advisory