Description

Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.5 does not properly authorize access to shut down the server, which allows remote authenticated users with the Monitor, Deployer, or Auditor role to cause a denial of service via unspecified vectors.

Remediation

References

CVE-2015-5304

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2011-4885)

WordPress Plugin ImageDrop 'ImageDrop.php' Blind SQL Injection (1.1.2)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-31804)

WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions SQL Injection (3.0.5)

Jenkins Missing Authorization Vulnerability (CVE-2021-21695)

Severity

Low

Classification

CVE-2015-5304 CWE-264

Tags

Missing Update Known Vulnerabilities