CVE-2010-3878
Fixed in a distro release EPSS <1%
Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.
Products: redhat jboss_enterprise_application_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxb | 0:2.1.4-1.17.patch04.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxb | 0:2.1.4-1.17.patch04.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxws | 0:2.1.1-1jpp.ep1.13.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxws | 0:2.1.1-1jpp.ep1.13.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3 | 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3 | 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations | 0:3.3.1-2.0.GA_CP04.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations | 0:3.3.1-2.0.GA_CP04.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations-javadoc | 0:3.3.1-2.0.GA_CP04.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations-javadoc | 0:3.3.1-2.0.GA_CP04.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-javadoc | 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-javadoc | 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | javassist | 0:3.9.0-2.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | javassist | 0:3.9.0-2.ep1.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-common | 0:1.2.2-1.ep1.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-common | 0:1.2.2-1.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-messaging | 0:1.4.0-4.SP3_CP11.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-messaging | 0:1.4.0-4.SP3_CP11.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-remoting | 0:2.2.3-4.SP3.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-remoting | 0:2.2.3-4.SP3.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam-docs | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam-docs | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2 | 0:2.0.2.FP-1.ep1.26.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2 | 0:2.0.2.FP-1.ep1.26.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2-docs | 0:2.0.2.FP-1.ep1.26.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2-docs | 0:2.0.2.FP-1.ep1.26.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas | 0:4.3.0-8.GA_CP09.2.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas | 0:4.3.0-8.GA_CP09.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-4.3.0.GA_CP09-bin | 0:4.3.0-8.GA_CP09.2.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-4.3.0.GA_CP09-bin | 0:4.3.0-8.GA_CP09.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-client | 0:4.3.0-8.GA_CP09.2.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-client | 0:4.3.0-8.GA_CP09.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossts | 1:4.2.3-2.SP5_CP10.1jpp.ep1.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossts | 1:4.2.3-2.SP5_CP10.1jpp.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossweb | 0:2.0.0-7.CP15.0jpp.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossweb | 0:2.0.0-7.CP15.0jpp.ep1.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws | 0:2.0.1-6.SP2_CP09.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws | 0:2.0.1-6.SP2_CP09.2.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws-common | 0:1.0.0-3.GA_CP06.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws-common | 0:1.0.0-3.GA_CP06.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jgroups | 1:2.4.9-1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jgroups | 1:2.4.9-1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | quartz | 0:1.5.2-1jpp.patch01.ep1.4.2.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs | 0:4.3.0-8.GA_CP09.ep1.3.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs | 0:4.3.0-8.GA_CP09.ep1.3.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs-examples | 0:4.3.0-8.GA_CP09.ep1.3.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs-examples | 0:4.3.0-8.GA_CP09.ep1.3.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | xalan-j2 | 0:2.7.1-4.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | xalan-j2 | 0:2.7.1-4.ep1.1.el5 |