JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2012-11-23 20:55
Updated : 2024-02-28 12:00
NVD link : CVE-2012-2377
Mitre link : CVE-2012-2377
CVE.ORG link : CVE-2012-2377
JSON object : View
Products Affected
redhat
- jboss_enterprise_portal_platform
- jboss_enterprise_soa_platform
- jboss_enterprise_brms_platform
CWE
CWE-287
Improper Authentication