CVE-2012-0052

Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.

Score

CVSS 2.0 5.8 Medium

Status

Modified - secalert@redhat.com

Published

2014-02-14

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Jboss Operations Network (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2012-0089.html
• http://rhn.redhat.com/errata/RHSA-2012-0406.html
• https://bugzilla.redhat.com/show_bug.cgi?id=781964