NVD

Id
9627  
Name
CVE-2011-2908  
Description
Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitrary code via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-11-23  
Modified Date
2013-02-06  
Seq
2011-2908  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55006 9627 CVE-2011-2908 RHSA-2012:1152  View
55007 9627 CVE-2011-2908 RHSA-2012:1165  View
55008 9627 CVE-2011-2908 RHSA-2012:1232  View
55009 9627 CVE-2011-2908 RHSA-2013:0191  View
55010 9627 CVE-2011-2908 RHSA-2013:0192  View
55011 9627 CVE-2011-2908 RHSA-2013:0193  View
55012 9627 CVE-2011-2908 RHSA-2013:0194  View
55013 9627 CVE-2011-2908 RHSA-2013:0195  View
55014 9627 CVE-2011-2908 RHSA-2013:0196  View
55015 9627 CVE-2011-2908 RHSA-2013:0197  View
55016 9627 CVE-2011-2908 RHSA-2013:0198  View
55017 9627 CVE-2011-2908 54915  View
55018 9627 CVE-2011-2908 jboss-jmx-console-csrf(77549)  View
55019 9627 CVE-2011-2908 https://bugzilla.redhat.com/show_bug.cgi?id=730176  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29835 JVNDB-2012-005542 複数の JBoss Enterprise 製品におけるクロスサイトリクエストフォージェリの脆弱性 JBoss Enterprise Portal Platform、BRMS Platform および SOA Platform の JMX Console (jmx-console) には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2011-2908 50815 CVE-2011-2908 9627 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005542.html 2012-08-08 2012-11-27 View