PT-2005-5374 · Red Hat · Jboss Enterprise Java Beans (Ejb) 3.0 Rc3

Publicado 2005-12-31 · Atualizado 2017-07-20 · CVE-2005-4709

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions JBoss Enterprise Java Beans (EJB) 3.0 RC3

Description The issue arises from the popSubjectContext method in the SecurityAssociation class, which fails to properly reset the threadPrincipal and threadCredential values after a client session terminates. This allows remote attackers to potentially gain the roles of an arbitrary previous client who had the same JBoss server thread.

Recommendations For JBoss Enterprise Java Beans (EJB) 3.0 RC3, consider implementing a workaround to reset the threadPrincipal and threadCredential values after each client session termination to prevent unauthorized access. However, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-4709

Produtos afetados

Jboss Enterprise Java Beans (Ejb) 3.0 Rc3

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-4709 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24384 · Nota
• http://vupen.com/english/advisories/2006/0374 · Nota
• http://jira.jboss.com/jira/browse/EJBTHREE-384 · Correção