CVE-2015-0297 | BDVDB-2026-69208 Detail

Description#

Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rhn.redhat.com/errata/RHSA-2015-0862.html
http://www.securitytracker.com/id/1032181

Exploit#

No public exploit known

History#

Version 12015-04-24Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.