Description

Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be granted the java.security.AllPermission permission and allows remote attackers to bypass intended access restrictions.

Remediation

References

CVE-2014-0093

Related Vulnerabilities

IBM WebSEAL Improper Certificate Validation Vulnerability (CVE-2019-4150)

Jenkins Missing Authorization Vulnerability (CVE-2021-21694)

MySQL CVE-2022-21270 Vulnerability (CVE-2022-21270)

WordPress Plugin Images to WebP Multiple Vulnerabilities (1.8)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.25)

Severity

Medium

Classification

CVE-2014-0093 CWE-264

Tags

Missing Update Known Vulnerabilities