CVE-2014-0018
Fixed in a distro release EPSS <1%
Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container (MSC) service registry, which allows local users to modify the server via a crafted deployment.
Products: redhat jboss_enterprise_application_platform, redhat jboss_wildfly_application_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 6 | hornetq | 0:2.3.14-1.Final_redhat_1.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | hornetq | 0:2.3.14-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jacorb-jboss | 0:2.3.2-13.redhat_6.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jacorb-jboss | 0:2.3.2-13.redhat_6.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-appclient | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-appclient | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cli | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cli | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-client-all | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-client-all | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-clustering | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-clustering | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cmp | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cmp | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-configadmin | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-configadmin | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-connector | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-connector | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller-client | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller-client | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-core-security | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-core-security | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-repository | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-repository | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-scanner | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-scanner | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-http | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-http | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-management | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-management | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee-deployment | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee-deployment | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ejb3 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ejb3 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-embedded | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-embedded | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-host-controller | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-host-controller | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jacorb | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jacorb | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxr | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxr | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxrs | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxrs | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jdr | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jdr | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jmx | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jmx | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jpa | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jpa | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsf | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsf | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsr77 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsr77 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-logging | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-logging | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-mail | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-mail | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-management-client-content | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-management-client-content | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-messaging | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-messaging | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-modcluster | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-modcluster | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-naming | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-naming | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-network | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-network | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-configadmin | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-configadmin | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-service | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-service | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-platform-mbean | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-platform-mbean | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-pojo | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-pojo | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-process-controller | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-process-controller | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-protocol | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-protocol | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-remoting | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-remoting | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-sar | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-sar | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-security | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-security | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-server | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-server | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-system-jmx | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-system-jmx | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-threads | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-threads | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-transactions | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-transactions | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-version | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-version | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-web | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-web | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-webservices | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-webservices | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-weld | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-weld | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-xts | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-xts | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-logmanager | 0:1.5.2-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-logmanager | 0:1.5.2-1.Final_redhat_1.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-marshalling | 0:1.4.3-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-marshalling | 0:1.4.3-1.Final_redhat_1.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-xnio-base | 0:3.0.9-1.GA_redhat_1.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-xnio-base | 0:3.0.9-1.GA_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-core | 0:7.3.1-5.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-core | 0:7.3.1-5.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jbossas-javadocs | 0:7.3.1-3.Final_redhat_3.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-javadocs | 0:7.3.1-3.Final_redhat_3.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jbossas-modules-eap | 0:7.3.1-6.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-modules-eap | 0:7.3.1-6.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jbossweb | 0:7.3.0-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossweb | 0:7.3.0-1.Final_redhat_1.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | netty | 0:3.6.7-1.Final_redhat_1.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | netty | 0:3.6.7-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | picketbox | 0:4.0.19-2.SP3_redhat_1.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | picketbox | 0:4.0.19-2.SP3_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | weld-core | 0:1.1.17-1.Final_redhat_1.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | weld-core | 0:1.1.17-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | xml-security | 0:1.5.6-1.redhat_1.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | xml-security | 0:1.5.6-1.redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | xmltooling | 0:1.3.4-5.redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | xmltooling | 0:1.3.4-5.redhat_3.1.ep6.el6 |