Denial Of Service (DoS)

2019-01-1509:08:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.007 Low

EPSS

Percentile

80.6%

JSON

jboss eap is vulnerable to denial of service. It was found that JBoss EAP did not properly authorize a user performing a shut down. A remote user with the Monitor, Deployer, or Auditor role could use this flaw to shut down the EAP server, which is an action restricted to admin users.

CPENameOperatorVersion
jboss-as-remotingeq7.4.1__2.Final_redhat_3.1.ep6.el6
jboss-as-remotingeq7.5.1__2.Final_redhat_3.1.ep6.el6
jboss-as-remotingeq7.3.1__3.Final_redhat_3.1.ep6.el6
jboss-as-remotingeq7.4.2__3.Final_redhat_2.1.ep6.el7
jboss-as-remotingeq7.5.4__2.Final_redhat_4.1.ep6.el5
jboss-as-remotingeq7.3.2__2.Final_redhat_2.1.ep6.el5
jboss-as-remotingeq7.3.2__2.Final_redhat_2.1.ep6.el6
jboss-as-remotingeq7.2.0__8.Final_redhat_8.ep6.el6
jboss-as-remotingeq7.5.3__1.Final_redhat_2.1.ep6.el6
jboss-as-remotingeq7.4.1__2.Final_redhat_3.1.ep6.el7

Name	Operator	Version
jboss-as-remoting	eq	7.4.1__2.Final_redhat_3.1.ep6.el6
jboss-as-remoting	eq	7.5.1__2.Final_redhat_3.1.ep6.el6
jboss-as-remoting	eq	7.3.1__3.Final_redhat_3.1.ep6.el6
jboss-as-remoting	eq	7.4.2__3.Final_redhat_2.1.ep6.el7
jboss-as-remoting	eq	7.5.4__2.Final_redhat_4.1.ep6.el5
jboss-as-remoting	eq	7.3.2__2.Final_redhat_2.1.ep6.el5
jboss-as-remoting	eq	7.3.2__2.Final_redhat_2.1.ep6.el6
jboss-as-remoting	eq	7.2.0__8.Final_redhat_8.ep6.el6
jboss-as-remoting	eq	7.5.3__1.Final_redhat_2.1.ep6.el6
jboss-as-remoting	eq	7.4.1__2.Final_redhat_3.1.ep6.el7