Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2014-3472
HistoryAug 19, 2014 - 6:00 p.m.

CVE-2014-3472

2014-08-1918:00:00
redhat
www.cve.org

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.

Related

veracode 1
nvd 1
cve 1
prion 1
redhat 6
nessus 2
veracode
veracode
Authorization Bypass
2019-05-02 05:06:12
nvd
nvd
CVE-2014-3472
2014-08-19 18:55:01
cve
cve
CVE-2014-3472
2014-08-19 18:55:01
prion
prion
Design/Logic Flaw
2014-08-19 18:55:00
redhat
redhat
(RHSA-2014:1020) Important: Red Hat JBoss Enterprise Application Platform 6.3.0 update
2014-08-06 00:00:00
(RHSA-2014:1019) Important: Red Hat JBoss Enterprise Application Platform 6.3.0 update
2014-08-06 00:00:00
(RHSA-2015:0720) Important: Red Hat JBoss Fuse Service Works 6.0.0 security update
2015-03-24 20:57:38
nessus
nessus
RHEL 6 : JBoss EAP (RHSA-2014:1020)
2014-08-08 00:00:00
RHEL 5 : JBoss EAP (RHSA-2014:1019)
2014-08-08 00:00:00

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON
Related for CVELIST:CVE-2014-3472
veracode1nvd1cve1prion1redhat6nessus2