PT-2019-8771 · Red Hat · Jboss Eap Management Console

Jakub Palaczynski + 1 · Published 2019-03-27 · Updated 2019-06-11 · CVE-2018-10934

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions JBoss Management Console versions prior to 7.1.6.CR1 JBoss Management Console versions prior to 7.1.6.GA

Description A cross-site scripting (XSS) issue was discovered. This allows users with object creation capabilities to attack other privileged users.

Recommendations For versions prior to 7.1.6.CR1, update to version 7.1.6.CR1 or later. For versions prior to 7.1.6.GA, update to version 7.1.6.GA or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-10934

RHSA-2019:0364

RHSA-2019:0365

RHSA-2019:1159

RHSA-2019:1160

RHSA-2019:1161

Affected Products

Jboss Eap Management Console

References · 8

• https://access.redhat.com/errata/RHSA-2019:1160 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1162 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1159 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-10934 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1161 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10934 · Security Note
• https://security.netapp.com/advisory/ntap-20190611-0002 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934 · Note