NVD

Id
53539  
Name
CVE-2007-1354  
Description
The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles of the current user, which allows remote authenticated administrators to trigger a race condition and gain privileges by logging in during a session by a more privileged administrator, as demonstrated by privilege escalation from Read Mode to Write Mode.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-27  
Modified Date
2008-11-13  
Seq
2007-1354  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271241 53539 CVE-2007-1354 http://jira.jboss.com/jira/browse/ASPATCH-172  View
271242 53539 CVE-2007-1354 http://jira.jboss.com/jira/browse/ASPATCH-175  View
271243 53539 CVE-2007-1354 RHSA-2007:0151  View
271244 53539 CVE-2007-1354 [jboss-watch-list] 20070416 [RHSA-2007:0151-01] Low: JBoss Application Server security update  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54786 JVNDB-2007-003478 JBoss Application Server の JMX Console における権限を取得される脆弱性 JBoss Application Server の JMX Console の Access Control 機能 (JMXOpsAccessControlFilter) には、カレントユーザのロールを格納するため member 変数を使用するため、競合状態を誘発される、および権限を取得される脆弱性が存在します。 CVE-2007-1354 24709 CVE-2007-1354 53539 6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003478.html 2007-04-16 2012-09-25 View