Description (CNA)
org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/59554
- http://secunia.com/advisories/59555
- http://secunia.com/advisories/59346
- http://rhn.redhat.com/errata/RHSA-2015-1888.html
- http://rhn.redhat.com/errata/RHSA-2014-0793.html
- http://www.securitytracker.com/id/1030457
- http://rhn.redhat.com/errata/RHSA-2014-0785.html
- http://rhn.redhat.com/errata/RHSA-2014-0791.html
- http://rhn.redhat.com/errata/RHSA-2014-0792.html
- http://rhn.redhat.com/errata/RHSA-2014-0794.html
ADP enrichment
No English description supplied.
- http://secunia.com/advisories/59554
- http://secunia.com/advisories/59555
- http://secunia.com/advisories/59346
- http://rhn.redhat.com/errata/RHSA-2015-1888.html
- http://rhn.redhat.com/errata/RHSA-2014-0793.html
- http://www.securitytracker.com/id/1030457
- http://rhn.redhat.com/errata/RHSA-2014-0785.html
- http://rhn.redhat.com/errata/RHSA-2014-0791.html
- http://rhn.redhat.com/errata/RHSA-2014-0792.html
- http://rhn.redhat.com/errata/RHSA-2014-0794.html