CVE-2012-0874
NoneCVSS
—
EPSS
15.6%
Published
Feb 5, 2013
CISA due date
—
The record
The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 do not require authentication by default in certain profiles, which might allow remote attackers to invoke MBean methods and execute arbitrary code via unspecified vectors. NOTE: this issue can only be exploited when the interceptor is not properly configured with a "second layer of authentication," or when used in conjunction with other vulnerabilities that bypass this second layer.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:jboss_enterprise_application_platform:5::el4 | aopalliance | 0 | 0:1.0-5.2.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | apache-cxf | 0 | 0:2.2.12-6.1.patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | bsh2 | 0 | 0:2.0-0.b4.15.1.patch01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | bsh2-bsf | 0 | 0:2.0-0.b4.15.1.patch01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | glassfish-jaxb | 0 | 0:2.1.12-12_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | google-guice | 0 | 0:2.0-3.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3 | 0 | 1:3.3.2-1.6.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-annotations | 0 | 0:3.4.0-3.4.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-annotations-javadoc | 0 | 0:3.4.0-3.4.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-entitymanager | 0 | 0:3.4.0-4.4.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-entitymanager-javadoc | 0 | 0:3.4.0-4.4.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-javadoc | 0 | 1:3.3.2-1.6.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-search | 0 | 0:3.1.1-2.3.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-search-javadoc | 0 | 0:3.1.1-2.3.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hornetq | 0 | 0:2.2.24-1.EAP.GA.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hornetq-native | 0 | 0:2.2.20-1.EAP.GA.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hornetq-native-debuginfo | 0 | 0:2.2.20-1.EAP.GA.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jacorb-jboss | 0 | 0:2.3.2-2.jboss_1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | javassist | 0 | 0:3.12.0-6.SP1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-aop2 | 0 | 0:2.1.6-5.CP06.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-bootstrap | 0 | 0:1.0.2-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-cache-core | 0 | 0:3.2.11-1.GA.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-cache-pojo | 0 | 0:3.0.1-1.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-cl | 0 | 0:2.0.11-1.GA.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-cluster-ha-server-api | 0 | 0:1.2.1-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-common-beans | 0 | 0:1.0.1-2.1.Final.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-common-core | 0 | 0:2.2.21-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-eap5-native | 0 | 0:5.2.0-6.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb-3.0-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-cache | 0 | 0:1.0.0-4.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-core | 0 | 0:1.3.9-0.4.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-ext-api | 0 | 0:1.0.0-4.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-ext-api-impl | 0 | 0:1.0.0-3.7.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-interceptors | 0 | 0:1.0.9-0.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-metadata | 0 | 0:1.0.0-3.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-metrics-deployer | 0 | 0:1.1.1-0.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-security | 0 | 0:1.0.2-0.5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-timeout | 0 | 0:0.1.1-0.5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-timeout-3.0-api | 0 | 0:0.1.1-0.5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-timeout-spi | 0 | 0:0.1.1-0.5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-transactions | 0 | 0:1.0.2-1.4.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jacc-1.1-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jad-1.2-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jaspi-1.0-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-javaee | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-javaee-poms | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jaxrpc-api_1.1_spec | 0 | 0:1.0.0-16.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jca-1.5-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jms-1.1-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jpa-deployers | 0 | 0:1.0.0-6.SP2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-logmanager | 0 | 0:1.1.2-6.GA_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-messaging | 0 | 0:1.4.8-12.SP9.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-naming | 0 | 0:5.0.3-5.CP02.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-reflect | 0 | 0:2.0.4-2.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-remoting | 0 | 0:2.5.4-10.SP4.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-seam2 | 0 | 0:2.2.6.EAP5-9.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-seam2-docs | 0 | 0:2.2.6.EAP5-9.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-seam2-examples | 0 | 0:2.2.6.EAP5-9.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-seam2-runtime | 0 | 0:2.2.6.EAP5-9.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-security-negotiation | 0 | 0:2.1.3-1.GA.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-security-spi | 0 | 1:2.0.5-4.SP3_1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-transaction-1.0.1-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-vfs2 | 0 | 0:2.2.1-2.GA.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas | 0 | 0:5.2.0-14.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-client | 0 | 0:5.2.0-14.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-hornetq | 0 | 0:5.2.0-6.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-messaging | 0 | 0:5.2.0-14.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-tp-licenses | 0 | 0:5.2.0-7.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-ws-cxf | 0 | 0:5.2.0-8.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-ws-native | 0 | 0:5.2.0-14.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbosssx2 | 0 | 0:2.0.5-8.3.SP3_1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossts | 0 | 1:4.6.1-12.CP13.8.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossts-javadoc | 0 | 1:4.6.1-12.CP13.8.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossweb | 0 | 0:2.1.13-2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossweb-el-1.0-api | 0 | 0:2.1.13-2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossweb-jsp-2.1-api | 0 | 0:2.1.13-2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossweb-lib | 0 | 0:2.1.13-2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossweb-servlet-2.5-api | 0 | 0:2.1.13-2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossws | 0 | 0:3.1.2-13.SP15_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossws-common | 0 | 0:1.1.0-9.SP10.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossws-framework | 0 | 0:3.1.2-9.SP13.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossws-spi | 0 | 0:1.1.2-6.SP8.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jgroups | 0 | 1:2.6.22-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jopr-embedded | 0 | 0:1.3.4-19.SP6.9.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jopr-hibernate-plugin | 0 | 0:3.0.0-14.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jopr-jboss-as-5-plugin | 0 | 0:3.0.0-15.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jopr-jboss-cache-v3-plugin | 0 | 0:3.0.0-15.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster | 0 | 0:1.0.10-12.2.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-demo | 0 | 0:1.0.10-12.2.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-jbossas | 0 | 0:1.0.10-12.2.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-jbossweb2 | 0 | 0:1.0.10-12.2.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-native | 0 | 0:1.0.10-10.GA_CP04_patch01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-native-debuginfo | 0 | 0:1.0.10-10.GA_CP04_patch01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-tomcat6 | 0 | 0:1.0.10-12.2.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | netty | 0 | 0:3.2.5-6.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | picketlink-federation | 0 | 0:2.1.5-3.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | picketlink-quickstarts | 0 | 0:2.1.5-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | picketlink-quickstarts-idp | 0 | 0:2.1.5-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | picketlink-quickstarts-pdp | 0 | 0:2.1.5-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | picketlink-quickstarts-sts | 0 | 0:2.1.5-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | resteasy | 0 | 0:1.2.1-18.CP02_patch02.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | resteasy-examples | 0 | 0:1.2.1-18.CP02_patch02.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | resteasy-javadoc | 0 | 0:1.2.1-18.CP02_patch02.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | resteasy-manual | 0 | 0:1.2.1-18.CP02_patch02.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rh-eap-docs | 0 | 0:5.2.0-7.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rh-eap-docs-examples | 0 | 0:5.2.0-7.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-common-parent | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-client-api | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-comm-api | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-domain | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-gui | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-native-system | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-parent | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-plugin-api | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-plugin-container | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-util | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-jboss-as-common | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-jmx-plugin | 0 | 0:3.0.0-21.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-modules-parent | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-parent | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-platform-plugin | 0 | 0:3.0.0-15.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-plugins-parent | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2 | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-agent | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-all | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-aop | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-beans | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-context | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-core | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | wss4j | 0 | 0:1.5.12-4.2_patch_02.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xerces-j2 | 0 | 0:2.9.1-10.patch02.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-jaxp-1.1-apis | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-jaxp-1.2-apis | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-jaxp-1.3-apis | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-resolver10 | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-resolver11 | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-resolver12 | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-which10 | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-which11 | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-security | 0 | 0:1.5.1-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | aopalliance | 0 | 0:1.0-5.2.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | apache-cxf | 0 | 0:2.2.12-6.1.patch_04.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | bsh2 | 0 | 0:2.0-0.b4.15.1.patch01.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | bsh2-bsf | 0 | 0:2.0-0.b4.15.1.patch01.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | glassfish-jaxb | 0 | 0:2.1.12-12_patch_03.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | google-guice | 0 | 0:2.0-3.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3 | 0 | 1:3.3.2-1.5.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-annotations | 0 | 0:3.4.0-3.3.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-annotations-javadoc | 0 | 0:3.4.0-3.3.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-entitymanager | 0 | 0:3.4.0-4.4.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-entitymanager-javadoc | 0 | 0:3.4.0-4.4.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-javadoc | 0 | 1:3.3.2-1.5.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-search | 0 | 0:3.1.1-2.4.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-search-javadoc | 0 | 0:3.1.1-2.4.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hornetq | 0 | 0:2.2.24-1.EAP.GA.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hornetq-native | 0 | 0:2.2.20-1.EAP.GA.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jacorb-jboss | 0 | 0:2.3.2-2.jboss_1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | javassist | 0 | 0:3.12.0-6.SP1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-aop2 | 0 | 0:2.1.6-5.CP06.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-bootstrap | 0 | 0:1.0.2-1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-cache-core | 0 | 0:3.2.11-1.GA.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-cache-pojo | 0 | 0:3.0.1-1.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-cl | 0 | 0:2.0.11-1.GA.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-cluster-ha-server-api | 0 | 0:1.2.1-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-common-beans | 0 | 0:1.0.1-2.1.Final.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-common-core | 0 | 0:2.2.21-1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-eap5-native | 0 | 0:5.2.0-6.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb-3.0-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-cache | 0 | 0:1.0.0-4.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-core | 0 | 0:1.3.9-0.4.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-ext-api | 0 | 0:1.0.0-4.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-ext-api-impl | 0 | 0:1.0.0-3.7.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-interceptors | 0 | 0:1.0.9-0.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-metadata | 0 | 0:1.0.0-3.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-metrics-deployer | 0 | 0:1.1.1-0.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-security | 0 | 0:1.0.2-0.5.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-timeout | 0 | 0:0.1.1-0.5.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-timeout-3.0-api | 0 | 0:0.1.1-0.5.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-timeout-spi | 0 | 0:0.1.1-0.5.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-transactions | 0 | 0:1.0.2-1.4.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jacc-1.1-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jad-1.2-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jaspi-1.0-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-javaee | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-javaee-poms | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jaxrpc-api_1.1_spec | 0 | 0:1.0.0-16.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jca-1.5-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jms-1.1-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jpa-deployers | 0 | 0:1.0.0-6.1SP2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-logmanager | 0 | 0:1.1.2-6.GA_patch_01.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-messaging | 0 | 0:1.4.8-12.SP9.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-naming | 0 | 0:5.0.3-5.1.CP02.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-reflect | 0 | 0:2.0.4-2.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-remoting | 0 | 0:2.5.4-10.SP4.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-seam2 | 0 | 0:2.2.6.EAP5-10.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-seam2-docs | 0 | 0:2.2.6.EAP5-10.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-seam2-examples | 0 | 0:2.2.6.EAP5-10.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-seam2-runtime | 0 | 0:2.2.6.EAP5-10.ep5.el5 |
Related vulnerabilities
- CVE-2012-3546 org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x… Also affects aopalliance
- CVE-2011-2730 VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before… Also affects aopalliance
- CVE-2012-5887 The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before… Also affects jbossweb
- CVE-2012-0022 Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an… Also affects jbossweb
- CVE-2011-4858 Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash… Also affects jbossweb
- CVE-2010-4476 The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and… Also affects jbossweb
- CVE-2026-114638 Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the… CWE-287
- CVE-2026-114639 Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass… CWE-287