Lucene search
RedhatCVELIST:CVE-2014-7849HistoryFeb 13, 2015 - 3:00 p.m.
CVE-2014-7849
2015-02-1315:00:00
redhat
www.cve.org
The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization conditions, which allows remote authenticated users to add, modify, and undefine otherwise restricted attributes by leveraging the Maintainer role.
References
rhn.redhat.com/errata/RHSA-2015-0215.html
rhn.redhat.com/errata/RHSA-2015-0216.html
rhn.redhat.com/errata/RHSA-2015-0217.html
rhn.redhat.com/errata/RHSA-2015-0218.html
rhn.redhat.com/errata/RHSA-2015-0920.html
www.securitytracker.com/id/1031741
bugzilla.redhat.com/show_bug.cgi?id=1165170
exchange.xforce.ibmcloud.com/vulnerabilities/100890
Related
nvd
nvd
CVE-2014-7849
2015-02-13 15:59:05
cve
cve
CVE-2014-7849
2015-02-13 15:59:05
veracode
veracode
Authorization Bypass
2019-05-02 05:08:13
prion
prion
Authorization
2015-02-13 15:59:00
nessus
nessus
RHEL 6 : JBoss EAP (RHSA-2015:0217)
2015-02-13 00:00:00
RHEL 7 : JBoss EAP (RHSA-2015:0218)
2015-09-01 00:00:00
redhat
redhat