NVD

Id
10992  
Name
CVE-2011-4605  
Description
The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-11-23  
Modified Date
2013-04-01  
Seq
2011-4605  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61339 10992 CVE-2011-4605 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=766469  View
61340 10992 CVE-2011-4605 RHSA-2012:1022  View
61341 10992 CVE-2011-4605 RHSA-2012:1023  View
61342 10992 CVE-2011-4605 RHSA-2012:1024  View
61343 10992 CVE-2011-4605 RHSA-2012:1025  View
61344 10992 CVE-2011-4605 RHSA-2012:1026  View
61345 10992 CVE-2011-4605 RHSA-2012:1027  View
61346 10992 CVE-2011-4605 RHSA-2012:1028  View
61347 10992 CVE-2011-4605 RHSA-2012:1109  View
61348 10992 CVE-2011-4605 RHSA-2012:1125  View
61349 10992 CVE-2011-4605 RHSA-2012:1232  View
61350 10992 CVE-2011-4605 RHSA-2012:1295  View
61351 10992 CVE-2011-4605 54644  View
61352 10992 CVE-2011-4605 1027501  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29836 JVNDB-2012-005543 複数の JBoss Enterprise 製品における JNDI ツリーにアイテムを追加される脆弱性 複数の JBoss Enterprise 製品の (1) JNDI サービス、(2) HA-JNDI サービス、および (3) HAJNDIFactory の invoker サーブレットは、書き込みアクセスを適切に制限しないため、JNDI ツリーにアイテムを追加される、削除される、またはアイテムを変更される脆弱性が存在します。 CVE-2011-4605 52512 CVE-2011-4605 10992 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005543.html 2012-06-20 2012-11-27 View