NVD

Id
10995  
Name
CVE-2011-4608  
Description
mod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from an external vhost that does not enforce security constraints.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-01-27  
Modified Date
2012-02-02  
Seq
2011-4608  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61360 10995 CVE-2011-4608 RHSA-2012:0035  View
61361 10995 CVE-2011-4608 RHSA-2012:0036  View
61362 10995 CVE-2011-4608 RHSA-2012:0037  View
61363 10995 CVE-2011-4608 RHSA-2012:0038  View
61364 10995 CVE-2011-4608 RHSA-2012:0039  View
61365 10995 CVE-2011-4608 RHSA-2012:0040  View
61366 10995 CVE-2011-4608 51554  View
61367 10995 CVE-2011-4608 1026545  View
61368 10995 CVE-2011-4608 jboss-modcluster-security-bypass(72460)  View
61369 10995 CVE-2011-4608 https://bugzilla.redhat.com/show_bug.cgi?id=767020  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25553 JVNDB-2012-001260 Red Hat Linux 用の JBoss Enterprise Application Platform におけるアクセス制限を回避される脆弱性 Red Hat Linux 用の JBoss Enterprise Application Platform にある mod_cluster は、ワーカーノードを任意の仮想ホストに登録するため、アクセス制限を回避され、悪意のあるコンテンツ、セッションの乗っ取り、および認証情報の盗難をされる脆弱性が存在します。 CVE-2011-4608 52515 CVE-2011-4608 10995 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001260.html 2012-01-18 2012-02-01 View