7.5

CVE-2011-4605

The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0 Updatecp10
Redhat ≫ Jboss Enterprise Portal Platform Version4.3.0 Updatecp07
Redhat ≫ Jboss Enterprise Soa Platform Version4.2.0 Updatecp05
Redhat ≫ Jboss Enterprise Soa Platform Version4.3.0 Updatecp05
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.52% 0.877
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://rhn.redhat.com/errata/RHSA-2012-1232.html
http://secunia.com/advisories/50549
Vendor Advisory
http://secunia.com/advisories/50084
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1028.html
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=766469
http://rhn.redhat.com/errata/RHSA-2012-1022.html
http://rhn.redhat.com/errata/RHSA-2012-1023.html
http://rhn.redhat.com/errata/RHSA-2012-1024.html
http://rhn.redhat.com/errata/RHSA-2012-1025.html
http://rhn.redhat.com/errata/RHSA-2012-1026.html
http://rhn.redhat.com/errata/RHSA-2012-1027.html
http://rhn.redhat.com/errata/RHSA-2012-1109.html
http://rhn.redhat.com/errata/RHSA-2012-1125.html
http://rhn.redhat.com/errata/RHSA-2012-1295.html
http://secunia.com/advisories/49656
Vendor Advisory
http://secunia.com/advisories/49658
Vendor Advisory
http://www.securityfocus.com/bid/54644
http://www.securitytracker.com/id?1027501