PT-2019-8771 · Red Hat · Jboss Eap Management Console

Jakub Palaczynski + 1 · Publicado 2019-03-27 · Atualizado 2019-06-11 · CVE-2018-10934

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions JBoss Management Console versions prior to 7.1.6.CR1 JBoss Management Console versions prior to 7.1.6.GA

Description A cross-site scripting (XSS) issue was discovered. This allows users with object creation capabilities to attack other privileged users.

Recommendations For versions prior to 7.1.6.CR1, update to version 7.1.6.CR1 or later. For versions prior to 7.1.6.GA, update to version 7.1.6.GA or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-10934

RHSA-2019:0364

RHSA-2019:0365

RHSA-2019:1159

RHSA-2019:1160

RHSA-2019:1161

Produtos afetados

Jboss Eap Management Console

Referências · 8

• https://access.redhat.com/errata/RHSA-2019:1160 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2019:1162 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2019:1159 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-10934 · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20190611-0002 · Nota
• https://access.redhat.com/errata/RHSA-2019:1161 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-10934 · Nota de Segurança