CVE-2011-2908

Опубликовано: 23 нояб. 2012

Источник: nvd

CVSS2: 6

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitrary code via unspecified vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.3.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*

Версия до 5.2.1 (включая)

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00837

Низкий

6 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVE-2011-2908

redhat

почти 19 лет назад

GHSA-x3w9-v829-qphw

github

больше 3 лет назад