CVE-2014-7849

Description

The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization conditions, which allows remote authenticated users to add, modify, and undefine otherwise restricted attributes by leveraging the Maintainer role.

Risk Information

Base Score

4.3

MODERATE

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS Score

Exploitation Probability

0.4

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 6.2.2	Windows
Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 6.2.0	Windows
Vulnerabilities CVE-2014-3464,CVE-2014-3472,CVE-2014-3490,CVE-2014-7849 are affected in Red Hat JBoss Enterprise Application Platform 7 6.3.0	Windows
Vulnerabilities CVE-2014-3481,CVE-2014-7849 are affected in Red Hat JBoss Enterprise Application Platform 7 6.2.1	Windows
Vulnerabilities CVE-2014-3481,CVE-2014-7849 are affected in Red Hat JBoss Enterprise Application Platform 7 6.2.3	Windows
Vulnerabilities CVE-2014-3530,CVE-2014-7849 are affected in Red Hat JBoss Enterprise Application Platform 7 6.2.4	Windows
Vulnerabilities CVE-2014-7827,CVE-2014-7849,CVE-2014-7853 are affected in Red Hat JBoss Enterprise Application Platform 7 6.3.2	Windows
Vulnerabilities CVE-2014-7849 are affected in Red Hat JBoss Enterprise Application Platform 7 6.3.1	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234