Jboss

Jboss Application Server

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6

CVE-2007-1354

  • EPSS 0.65%
  • Published 27.07.2007 21:30:00
  • Last modified 09.04.2025 00:30:58

The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles of the current user, which allows remote authenticated administrators to...

7.5

CVE-2007-1036

  • EPSS 90.35%
  • Published 21.02.2007 11:28:00
  • Last modified 09.04.2025 00:30:58

The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.

7.5

CVE-2006-5750

  • EPSS 22.75%
  • Published 27.11.2006 20:07:00
  • Last modified 09.04.2025 00:30:58

Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecifie...