PT-2014-2201 · Red Hat · Red Hat Jboss Operations Network

David Jorm · Publicado 2014-02-14 · Atualizado 2014-02-14 · CVE-2012-0052

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Operations Network (JON) versions prior to 2.4.2 Red Hat JBoss Operations Network (JON) versions 3.0.x prior to 3.0.1

Description The issue allows remote attackers to spoof the identity of arbitrary agents via the registered agent name, as the JON agent key is not checked.

Recommendations For versions prior to 2.4.2, update to version 2.4.2 or later. For versions 3.0.x prior to 3.0.1, update to version 3.0.1 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-0052

Produtos afetados

Red Hat Jboss Operations Network

Referências · 4

• http://rhn.redhat.com/errata/RHSA-2012-0406.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2012-0089.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=781964 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0052 · Nota de Segurança