CVE-2012-0874 The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and S...
MediumCVSS 6.8
EPSS 15.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 do not require authentication by default in certain profiles, which might allow remote attackers to invoke MBean methods and execute arbitrary code via unspecified vectors. NOTE: this issue can only be exploited when the interceptor is not properly configured with a "second layer of authentication," or when used in conjunction with other vulnerabilities that bypass this second layer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat jboss enterprise application platform | = 5.2.0 | No fix listed |
| redhat jboss enterprise web platform | = 5.2.0 | No fix listed |
| redhat jboss enterprise brms platform | <= 5.3.0 | No fix listed |
References
- 20131219 ESA-2013-094: EMC Data Protection Advisor JBOSS Remote Code Execution Vulnerability mailing-list
- RHSA-2013:0191 vendor-advisory
- RHSA-2013:0192 vendor-advisory
- RHSA-2013:0193 vendor-advisory
- RHSA-2013:0194 vendor-advisory
- RHSA-2013:0195 vendor-advisory
- RHSA-2013:0196 vendor-advisory
- RHSA-2013:0197 vendor-advisory
- RHSA-2013:0198 vendor-advisory
- RHSA-2013:0221 vendor-advisory
- RHSA-2013:0533 vendor-advisory
- 51984 third-party-advisory vendor-advisory
- 52054 third-party-advisory vendor-advisory
- 1028042 vdb-entry
- 30211 exploit
- 57552 vdb-entry
- bugzilla.redhat.com
- jboss-eap-jmxinvokerhaservlet-code-exec(81511) vdb-entry