PT-2019-4186 · Red Hat · Red Hat Jboss Operations Network

Published 2019-02-15 · Updated 2019-10-10 · CVE-2019-3834

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Operations Network (affected versions not specified)

Description The issue is related to the implementation of the ClassLoader class in the Red Hat JBoss Operations Network platform. It involves the use of externally controlled input to select classes, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-470

Related Identifiers

BDU:2019-04781

CVE-2019-3834

Affected Products

Red Hat Jboss Operations Network

References · 5

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3834 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04781 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3834 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3834 · Security Note
• https://access.redhat.com/security/cve/cve-2019-3834 · Note