NVD

Id
13364  
Name
CVE-2010-1871  
Description
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-08-05  
Modified Date
2013-12-12  
Seq
2010-1871  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74016 13364 CVE-2010-1871 20130528 CA20130528-01: Security Notice for CA Process Automation (CA PAM)  View
74017 13364 CVE-2010-1871 RHSA-2010:0564  View
74018 13364 CVE-2010-1871 41994  View
74019 13364 CVE-2010-1871 1024253  View
74020 13364 CVE-2010-1871 ADV-2010-1929  View
74021 13364 CVE-2010-1871 seam-expressions-code-execution(60794)  View
74022 13364 CVE-2010-1871 https://bugzilla.redhat.com/show_bug.cgi?id=615956  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39685 JVNDB-2010-005470 Red Hat Linux 用の JBoss Enterprise Application Platform で使用されている jboss-seam2 における任意のコードを実行される脆弱性 Red Hat Linux 用の JBoss Enterprise Application Platform で使用されている JBoss Seam 2 (jboss-seam2) は、JBoss Expression Language (EL) 表記に対する入力を適切にサニタイズしないため、任意のコードを実行される脆弱性が存在します。 CVE-2010-1871 44451 CVE-2010-1871 13364 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005470.html 2010-07-27 2012-12-20 View