Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.810314
Category:Web application abuses
Title:Red Hat JBoss Enterprise Application Platform (EAP) < 6.4.5 DoS Vulnerability
Summary:Red Hat JBoss Enterprise Application Platform (EAP) is prone to; a denial of service (DoS) vulnerability.
Description:Summary:
Red Hat JBoss Enterprise Application Platform (EAP) is prone to
a denial of service (DoS) vulnerability.

Vulnerability Insight:
The flaw exists because Red Hat JBoss EAP is not properly
authorize access to shutdown the server.

Vulnerability Impact:
Successful exploitation will allow remote authenticated users
with the monitor, deployer, or auditor role to cause a denial of service.

Affected Software/OS:
Red Hat JBoss EAP server versions before 6.4.5.

Solution:
Update to version 6.4.5 or later.

CVSS Score:
3.5

CVSS Vector:
AV:N/AC:M/Au:S/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2015-5304
1034280
http://www.securitytracker.com/id/1034280
RHSA-2015:2538
http://rhn.redhat.com/errata/RHSA-2015-2538.html
RHSA-2015:2539
http://rhn.redhat.com/errata/RHSA-2015-2539.html
RHSA-2015:2540
http://rhn.redhat.com/errata/RHSA-2015-2540.html
RHSA-2015:2541
http://rhn.redhat.com/errata/RHSA-2015-2541.html
RHSA-2015:2542
http://rhn.redhat.com/errata/RHSA-2015-2542.html
https://bugzilla.redhat.com/show_bug.cgi?id=1273046
CopyrightCopyright (C) 2016 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.