CVE-2014-7849

The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization conditions, which allows remote authenticated users to add, modify, and undefine otherwise restricted attributes by leveraging the Maintainer role.

Score
CVSS 2.0 4.0 Medium
Status
Modified - secalert@redhat.com
Published
2015-02-13
Last modified
2024-08-06
Weaknesses
CWE-264

Affected products

References

 
 
© AVABIS GmbH privacypolicy about