CVE-2012-0062

Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security token.

Score

CVSS 2.0 5.8 Medium

Status

Modified - secalert@redhat.com

Published

2014-02-14

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Jboss Operations Network (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2012-0089.html
• http://rhn.redhat.com/errata/RHSA-2012-0406.html
• https://bugzilla.redhat.com/show_bug.cgi?id=783008