Description

org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.

Remediation

References

CVE-2014-0248

Related Vulnerabilities

WordPress Plugin AskApache Firefox Adsense Cross-Site Request Forgery (3.0)

TYPO3 Uncontrolled Recursion Vulnerability (CVE-2022-23500)

WordPress Plugin Slideshow Gallery LITE Cross-Site Scripting (1.5.3.4)

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-0882)

MySQL CVE-2020-14785 Vulnerability (CVE-2020-14785)

Severity

Medium

Classification

CVE-2014-0248 CWE-94

Tags

Missing Update Known Vulnerabilities