PT-2014-2203 · Red Hat · Red Hat Jboss Operations Network

David Jorm · Publicado 2014-02-14 · Atualizado 2014-02-14 · CVE-2012-0062

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Operations Network (JON) versions prior to 2.4.2 Red Hat JBoss Operations Network (JON) versions 3.0.x prior to 3.0.1

Description The issue allows remote attackers to hijack agent sessions via an agent registration request without a security token.

Recommendations For versions prior to 2.4.2, update to version 2.4.2 or later. For versions 3.0.x prior to 3.0.1, update to version 3.0.1 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-0062

Produtos afetados

Red Hat Jboss Operations Network

Referências · 4

• http://rhn.redhat.com/errata/RHSA-2012-0406.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=783008 · Nota
• http://rhn.redhat.com/errata/RHSA-2012-0089.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0062 · Nota de Segurança