Description

org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.

Remediation

References

http://rhn.redhat.com/errata/RHSA-2014-0793.html

http://rhn.redhat.com/errata/RHSA-2014-0785.html

http://rhn.redhat.com/errata/RHSA-2014-0792.html

http://rhn.redhat.com/errata/RHSA-2014-0791.html

http://www.securitytracker.com/id/1030457

http://secunia.com/advisories/59555

http://rhn.redhat.com/errata/RHSA-2014-0794.html

http://secunia.com/advisories/59346

http://secunia.com/advisories/59554

http://rhn.redhat.com/errata/RHSA-2015-1888.html

Related Vulnerabilities

CVE-2014-7810 Vulnerability in maven package org.apache.tomcat:jasper

CVE-2023-29234 Vulnerability in maven package org.apache.dubbo:dubbo

CVE-2011-0013 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2014-3416 Vulnerability in maven package org.jasig.portal:uportal-war

CVE-2020-6532 Vulnerability in npm package electron

Severity

Critical

Classification

CWE-94

Tags

Vendor Advisory