CVE-2012-0062

Опубликовано: 14 фев. 2014

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security token.

Ссылки

http://rhn.redhat.com/errata/RHSA-2012-0089.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-0406.html
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=783008
http://rhn.redhat.com/errata/RHSA-2012-0089.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-0406.html
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=783008

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:jboss_operations_network:*:*:*:*:*:*:*:*

Версия до 2.4.1 (включая)

cpe:2.3:a:redhat:jboss_operations_network:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_operations_network:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_operations_network:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_operations_network:2.2:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_operations_network:2.3:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_operations_network:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_operations_network:2.4:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_operations_network:3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00274

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2012-0062

redhat

около 14 лет назад

Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security token.

GHSA-2c3w-hjxh-5rqg

github

почти 4 года назад

Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security token.

EPSS

Процентиль: 50%

0.00274

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-287