CVE-2011-4608 | BDVDB-2026-48940 Detail
Description#
mod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from an external vhost that does not enforce security constraints.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.redhat.com/support/errata/RHSA-2012-0039.html
- https://bugzilla.redhat.com/show_bug.cgi?id=767020
- http://www.redhat.com/support/errata/RHSA-2012-0035.html
- http://www.securityfocus.com/bid/51554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72460
- http://www.redhat.com/support/errata/RHSA-2012-0040.html
- http://www.redhat.com/support/errata/RHSA-2012-0037.html
- http://www.redhat.com/support/errata/RHSA-2012-0036.html
- http://www.securitytracker.com/id?1026545
- http://www.redhat.com/support/errata/RHSA-2012-0038.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.