Signature Detail
Short Name |
APP:MISC:REDHAT-JBOSS-JNDI |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
RedHat JBoss JNDI Authentication Bypass |
Release Date |
2013/01/09 |
Update Number |
2223 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: RedHat JBoss JNDI Authentication Bypass
This signature detects attempts to exploit a known flaw in Red Hat JBoss. A successful attack can lead to unauthorized information disclosure.
Extended Description
JBoss Enterprise Application Platform is prone to a security-bypass vulnerability. Successful exploits may allow attackers to bypass certain security restrictions and perform unauthorized actions. JBoss Enterprise Portal Platform 4.3 CP07 is vulnerable; other versions may also be affected.
Affected Products
- JBoss Group JBooss Enterprise SOA Platform 5.1.2
- JBoss Group Jboss Enterprise SOA Platform 5.0
- JBoss Group Jboss Enterprise SOA Platform 5.0.2
- JBoss Group Jboss Enterprise SOA Platform 5.1.0
- JBoss Group Jboss Enterprise SOA Platform 5.2.0
- Red Hat JBoss Enterprise Portal Platform 4.3 CP07
References
- BugTraq: 54644
- CVE: CVE-2011-4605