VulnerabilityModified
CVE-2014-0005
PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote authenticated users to read and modify the application sever configuration and state by deploying a…
LOW 3.6EPSS 0.80%
Does this matter?
Lower severity and a low EPSS score (0.80%). Track it; it rarely justifies an emergency change on its own.
Description
PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote authenticated users to read and modify the application sever configuration and state by deploying a crafted application.
- CVSS 2.0
- 3.6 LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 0.80% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- redhat/jboss enterprise application platform · redhat/jboss enterprise brms platform
- Source
- secalert@redhat.com
References
- http://rhn.redhat.com/errata/RHSA-2014-0343.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0344.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0345.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0234.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0235.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0720.html
- http://rhn.redhat.com/errata/RHSA-2014-0343.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0344.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0345.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0234.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0235.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0720.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.