Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m8fx-9gm9-phm3

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request.

The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request.

EPSS

Процентиль: 72%
0.00735
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 9.9
redhat
больше 9 лет назад

The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request.

CVSS3: 8.8
nvd
больше 9 лет назад

The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request.

EPSS

Процентиль: 72%
0.00735
Низкий

8.8 High

CVSS3