CVE - CVE-2011-4605

CVE-ID
CVE-2011-4605	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1027501 URL:http://www.securitytracker.com/id?1027501 MISC:49656 URL:http://secunia.com/advisories/49656 MISC:49658 URL:http://secunia.com/advisories/49658 MISC:50084 URL:http://secunia.com/advisories/50084 MISC:50549 URL:http://secunia.com/advisories/50549 MISC:54644 URL:http://www.securityfocus.com/bid/54644 MISC:RHSA-2012:1022 URL:http://rhn.redhat.com/errata/RHSA-2012-1022.html MISC:RHSA-2012:1023 URL:http://rhn.redhat.com/errata/RHSA-2012-1023.html MISC:RHSA-2012:1024 URL:http://rhn.redhat.com/errata/RHSA-2012-1024.html MISC:RHSA-2012:1025 URL:http://rhn.redhat.com/errata/RHSA-2012-1025.html MISC:RHSA-2012:1026 URL:http://rhn.redhat.com/errata/RHSA-2012-1026.html MISC:RHSA-2012:1027 URL:http://rhn.redhat.com/errata/RHSA-2012-1027.html MISC:RHSA-2012:1028 URL:http://rhn.redhat.com/errata/RHSA-2012-1028.html MISC:RHSA-2012:1109 URL:http://rhn.redhat.com/errata/RHSA-2012-1109.html MISC:RHSA-2012:1125 URL:http://rhn.redhat.com/errata/RHSA-2012-1125.html MISC:RHSA-2012:1232 URL:http://rhn.redhat.com/errata/RHSA-2012-1232.html MISC:RHSA-2012:1295 URL:http://rhn.redhat.com/errata/RHSA-2012-1295.html MISC:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=766469 URL:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=766469
Assigning CNA
Red Hat, Inc.
Date Record Created
20111129	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20111129)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)