JBoss Enterprise Application Platform CVE-2011-4605 Security Bypass Vulnerability

Bugtraq ID:	54644
Class:	Design Error
CVE:	CVE-2011-4605
Remote:	Yes
Local:	No
Published:	Jul 23 2012 12:00AM
Updated:	Jul 26 2013 01:24PM
Credit:	Christian Schlüter
Vulnerable:	Red Hat JBoss Enterprise Portal Platform 4.3 CP07 JBoss Group JBooss Enterprise SOA Platform 5.1.2 HP Network Node Manager i 9.10 HP Network Node Manager i 9.0
Not Vulnerable:

JBoss Enterprise Application Platform CVE-2011-4605 Security Bypass Vulnerability

JBoss Enterprise Application Platform is prone to a security-bypass vulnerability.

Successful exploits may allow attackers to bypass certain security restrictions and perform unauthorized actions.

JBoss Enterprise Portal Platform 4.3 CP07 is vulnerable; other versions may also be affected.

JBoss Enterprise Application Platform CVE-2011-4605 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

JBoss Enterprise Application Platform CVE-2011-4605 Security Bypass Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

JBoss Enterprise Application Platform CVE-2011-4605 Security Bypass Vulnerability

References:

• JBoss Enterprise Application Platform Homepage (Red Hat)