PT-2019-4186 · Red Hat · Red Hat Jboss Operations Network

Publicado 2019-02-15 · Atualizado 2019-10-10 · CVE-2019-3834

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Operations Network (affected versions not specified)

Description The issue is related to the implementation of the ClassLoader class in the Red Hat JBoss Operations Network platform. It involves the use of externally controlled input to select classes, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-470

Identificadores relacionados

BDU:2019-04781

CVE-2019-3834

Produtos afetados

Red Hat Jboss Operations Network

Referências · 5

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3834 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-04781 · Nota de Segurança
• https://access.redhat.com/security/cve/cve-2019-3834 · Nota
• https://osv.dev/vulnerability/CVE-2019-3834 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3834 · Nota de Segurança