Description (CNA)
The domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2 allows remote authenticated users to gain privileges by leveraging failure to propagate administrative RBAC configuration to all slaves.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://rhn.redhat.com/errata/RHSA-2016-1841.html
- https://access.redhat.com/errata/RHSA-2017:3458
- https://bugzilla.redhat.com/show_bug.cgi?id=1359014
- http://rhn.redhat.com/errata/RHSA-2016-1838.html
- https://access.redhat.com/errata/RHSA-2017:3455
- https://access.redhat.com/errata/RHSA-2017:3456
- https://access.redhat.com/errata/RHSA-2017:3454
- http://rhn.redhat.com/errata/RHSA-2016-1839.html
- http://rhn.redhat.com/errata/RHSA-2016-1840.html
ADP enrichment
No English description supplied.
- http://rhn.redhat.com/errata/RHSA-2016-1841.html
- https://access.redhat.com/errata/RHSA-2017:3458
- https://bugzilla.redhat.com/show_bug.cgi?id=1359014
- http://rhn.redhat.com/errata/RHSA-2016-1838.html
- https://access.redhat.com/errata/RHSA-2017:3455
- https://access.redhat.com/errata/RHSA-2017:3456
- https://access.redhat.com/errata/RHSA-2017:3454
- http://rhn.redhat.com/errata/RHSA-2016-1839.html
- http://rhn.redhat.com/errata/RHSA-2016-1840.html