Unscored severity · published Jul 27, 2007
CVE-2007-1354
The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles…
–
CVSS
1.5%
EPSS
No
On KEV
Description
The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles of the current user, which allows remote authenticated administrators to trigger a race condition and gain privileges by logging in during a session by a more privileged administrator, as demonstrated by privilege escalation from Read Mode to Write Mode.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
Jboss Application Server · Jboss
4.0.2.ga_cp02; 4.0.2.ga_cp03; 4.0.2.ga_cp04; 4.0.5.ga; 4.0.5_cp01; 4.0.5_cp02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1354
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1354
Patch
http://jira.jboss.com/jira/browse/ASPATCH-172
Patch
http://jira.jboss.com/jira/browse/ASPATCH-175
osvdb.org
http://osvdb.org/46765
Patch
http://rhn.redhat.com/errata/RHSA-2007-0151.html
Patch
http://www.redhat.com/archives/jboss-watch-list/2007-April/msg00000.html
More from Jboss Application Server
–
CVE-2007-1036
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain…
–
CVE-2006-5750
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or…