NVD

Id
29029  
Name
CVE-2014-0093  
Description
Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be granted the java.security.AllPermission permission and allows remote attackers to bypass intended access restrictions.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-04-03  
Modified Date
2017-01-06  
Seq
2014-0093  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153190 29029 CVE-2014-0093 RHSA-2014:0343  View
153191 29029 CVE-2014-0093 RHSA-2014:0344  View
153192 29029 CVE-2014-0093 RHSA-2014:0345  View
153193 29029 CVE-2014-0093 66596  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13026 JVNDB-2014-001901 Red Hat JBoss Enterprise Application Platform におけるアプリケーションに java.security.AllPermission パーミッションを付与される脆弱性 Red Hat JBoss Enterprise Application Platform (JBEAP) は、Java Security Manager (JSM) を使用する際、ポリシーファイルで定義された権限を適切に適用しないため、アプリケーションに java.security.AllPermission パーミッションを付与される原因となり、アクセス制限を回避される脆弱性が存在します。 CVE-2014-0093 67494 CVE-2014-0093 29029 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001901.html 2014-03-31 2014-04-04 View