Description
JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) before 6.0.1, when using role-based authorization for Enterprise Java Beans (EJB) access, does not call the intended authorization modules, which prevents JACC permissions from being applied and allows remote attackers to obtain access to the EJB.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2000-0304)
Internet Information Services Other Vulnerability (CVE-2000-0886)
Oracle JRE CVE-2020-2755 Vulnerability (CVE-2020-2755)
WordPress Plugin wpForo Forum Multiple Vulnerabilities (2.1.7)
WordPress Plugin All-in-One Custom Backgrounds Lite Unspecified Vulnerability (2.0.2)