Lucene search

Veracode Vulnerability DatabaseVERACODE:16078

HistoryMay 02, 2019 - 5:08 a.m.

Authorization Bypass

2019-05-0205:08:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

67.9%

JSON

jbossas-welcome-content-eap is vulnerable to authorization bypass. The vulnerability exists as it does not properly verify authorization conditions, allowing remotely authenticated users to add, modify, and undefine restricted attributes by using the Maintainer role.

CPENameOperatorVersion
jboss-moduleseq1.3.3__1.Final_redhat_1.1.ep6.el6
jboss-moduleseq1.1.2__3.GA_redhat_1.ep6.el6
jboss-moduleseq1.1.3__2.GA_redhat_1.ep6.el5.1
jboss-moduleseq1.3.4__1.Final_redhat_1.1.ep6.el7
jboss-moduleseq1.3.3__1.Final_redhat_1.1.ep6.el5
jboss-moduleseq1.3.0__2.Final_redhat_2.1.ep6.el5
jboss-moduleseq1.3.0__2.Final_redhat_2.1.ep6.el6
jboss-moduleseq1.1.2__3.GA_redhat_1.ep6.el5
jboss-moduleseq1.2.2__1.Final_redhat_1.ep6.el5
jboss-moduleseq1.2.0__2.Final_redhat_1.ep6.el6

Name	Operator	Version
jboss-modules	eq	1.3.3__1.Final_redhat_1.1.ep6.el6
jboss-modules	eq	1.1.2__3.GA_redhat_1.ep6.el6
jboss-modules	eq	1.1.3__2.GA_redhat_1.ep6.el5.1
jboss-modules	eq	1.3.4__1.Final_redhat_1.1.ep6.el7
jboss-modules	eq	1.3.3__1.Final_redhat_1.1.ep6.el5
jboss-modules	eq	1.3.0__2.Final_redhat_2.1.ep6.el5
jboss-modules	eq	1.3.0__2.Final_redhat_2.1.ep6.el6
jboss-modules	eq	1.1.2__3.GA_redhat_1.ep6.el5
jboss-modules	eq	1.2.2__1.Final_redhat_1.ep6.el5
jboss-modules	eq	1.2.0__2.Final_redhat_1.ep6.el6

Rows per page:

1-10 of 42841

References

rhn.redhat.com/errata/RHSA-2015-0215.html

rhn.redhat.com/errata/RHSA-2015-0216.html

rhn.redhat.com/errata/RHSA-2015-0217.html

rhn.redhat.com/errata/RHSA-2015-0218.html

rhn.redhat.com/errata/RHSA-2015-0920.html

www.securitytracker.com/id/1031741

access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=33893&product=appplatform&version=6.3&downloadType=patches#eap63_details

access.redhat.com/security/updates/classification/#moderate

bugzilla.redhat.com/show_bug.cgi?id=1165170

bugzilla.redhat.com/show_bug.cgi?id=1179415

bugzilla.redhat.com/show_bug.cgi?id=1179418

bugzilla.redhat.com/show_bug.cgi?id=1179426

bugzilla.redhat.com/show_bug.cgi?id=1179429

bugzilla.redhat.com/show_bug.cgi?id=1179433

bugzilla.redhat.com/show_bug.cgi?id=1179436

bugzilla.redhat.com/show_bug.cgi?id=1179439

bugzilla.redhat.com/show_bug.cgi?id=1179443

bugzilla.redhat.com/show_bug.cgi?id=1181731

bugzilla.redhat.com/show_bug.cgi?id=1181734

bugzilla.redhat.com/show_bug.cgi?id=1181737

bugzilla.redhat.com/show_bug.cgi?id=1181741

bugzilla.redhat.com/show_bug.cgi?id=1181746

bugzilla.redhat.com/show_bug.cgi?id=1181749

bugzilla.redhat.com/show_bug.cgi?id=1181757

bugzilla.redhat.com/show_bug.cgi?id=1181760

bugzilla.redhat.com/show_bug.cgi?id=1181837

exchange.xforce.ibmcloud.com/vulnerabilities/100890