CVE-2014-0093 | BDVDB-2026-60735 Detail

Description#

Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be granted the java.security.AllPermission permission and allows remote attackers to bypass intended access restrictions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rhn.redhat.com/errata/RHSA-2014-0345.html
http://secunia.com/advisories/57675
http://rhn.redhat.com/errata/RHSA-2014-0344.html
http://rhn.redhat.com/errata/RHSA-2014-0343.html
http://www.securityfocus.com/bid/66596

Exploit#

No public exploit known

History#

Version 12014-04-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.