Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-0093

Fixed in a distro release EPSS 2%

Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be granted the java.security.AllPermission permission and allows remote attackers to bypass intended access restrictions.

Published 2014-04-03 · CVE record · OSV

Products: redhat jboss_enterprise_application_platform

Distro releases

ReleasePackageFixed in
Red Hat jboss enterprise application platform 6apache-cxf0:2.7.10-1.redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6apache-cxf0:2.7.10-1.redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6glassfish-jsf-eap60:2.1.27-6.redhat_8.1.ep6.el5
Red Hat jboss enterprise application platform 6glassfish-jsf-eap60:2.1.27-6.redhat_8.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-common-api-eap60:1.0.23-5.Final_redhat_5.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-common-api-eap60:1.0.23-5.Final_redhat_5.1.ep6.el5
Red Hat jboss enterprise application platform 6ironjacamar-common-impl-eap60:1.0.23-5.Final_redhat_5.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-common-impl-eap60:1.0.23-5.Final_redhat_5.1.ep6.el5
Red Hat jboss enterprise application platform 6ironjacamar-common-spi-eap60:1.0.23-5.Final_redhat_5.1.ep6.el5
Red Hat jboss enterprise application platform 6ironjacamar-common-spi-eap60:1.0.23-5.Final_redhat_5.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-core-api-eap60:1.0.23-5.Final_redhat_5.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-core-api-eap60:1.0.23-5.Final_redhat_5.1.ep6.el5
Red Hat jboss enterprise application platform 6ironjacamar-core-impl-eap60:1.0.23-5.Final_redhat_5.1.ep6.el5
Red Hat jboss enterprise application platform 6ironjacamar-core-impl-eap60:1.0.23-5.Final_redhat_5.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-deployers-common-eap60:1.0.23-5.Final_redhat_5.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-deployers-common-eap60:1.0.23-5.Final_redhat_5.1.ep6.el5
Red Hat jboss enterprise application platform 6ironjacamar-eap60:1.0.23-5.Final_redhat_5.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-eap60:1.0.23-5.Final_redhat_5.1.ep6.el5
Red Hat jboss enterprise application platform 6ironjacamar-jdbc-eap60:1.0.23-5.Final_redhat_5.1.ep6.el5
Red Hat jboss enterprise application platform 6ironjacamar-jdbc-eap60:1.0.23-5.Final_redhat_5.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-spec-api-eap60:1.0.23-5.Final_redhat_5.1.ep6.el5
Red Hat jboss enterprise application platform 6ironjacamar-spec-api-eap60:1.0.23-5.Final_redhat_5.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-validator-eap60:1.0.23-5.Final_redhat_5.1.ep6.el6
Red Hat jboss enterprise application platform 6ironjacamar-validator-eap60:1.0.23-5.Final_redhat_5.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-appclient0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-appclient0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-cli0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-cli0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-client-all0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-client-all0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-clustering0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-clustering0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-cmp0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-cmp0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-configadmin0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-configadmin0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-connector0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-connector0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-controller0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-controller0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-controller-client0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-controller-client0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-core-security0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-core-security0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-deployment-repository0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-deployment-repository0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-deployment-scanner0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-deployment-scanner0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-domain-http0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-domain-http0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-domain-management0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-domain-management0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-ee0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-ee0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-ee-deployment0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-ee-deployment0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-ejb30:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-ejb30:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-embedded0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-embedded0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-host-controller0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-host-controller0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-jacorb0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-jacorb0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-jaxr0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-jaxr0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-jaxrs0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-jaxrs0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-jdr0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-jdr0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-jmx0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-jmx0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-jpa0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-jpa0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-jsf0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-jsf0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-jsr770:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-jsr770:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-logging0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-logging0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-mail0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-mail0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-management-client-content0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-management-client-content0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-messaging0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-messaging0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-modcluster0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-modcluster0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-naming0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-naming0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-network0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-network0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-osgi0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-osgi0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-osgi-configadmin0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-osgi-configadmin0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-osgi-service0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-osgi-service0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-platform-mbean0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-platform-mbean0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-pojo0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-pojo0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-process-controller0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-process-controller0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-protocol0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-protocol0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-remoting0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-remoting0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-sar0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-sar0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-security0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-security0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-server0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-server0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-system-jmx0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-system-jmx0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-threads0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-threads0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-transactions0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-transactions0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-version0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-version0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-web0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-web0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-webservices0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-webservices0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-weld0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-weld0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-as-xts0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-as-xts0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-ejb-client0:1.0.25-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-ejb-client0:1.0.25-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-el-api_2.2_spec0:1.0.4-2.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-el-api_2.2_spec0:1.0.4-2.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-jsf-api_2.1_spec0:2.1.27-2.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-jsf-api_2.1_spec0:2.1.27-2.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-metadata0:7.0.9-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-metadata0:7.0.9-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-metadata-appclient0:7.0.9-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-metadata-appclient0:7.0.9-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-metadata-common0:7.0.9-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-metadata-common0:7.0.9-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-metadata-ear0:7.0.9-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-metadata-ear0:7.0.9-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-metadata-ejb0:7.0.9-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-metadata-ejb0:7.0.9-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-metadata-web0:7.0.9-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-metadata-web0:7.0.9-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-modules0:1.3.3-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-modules0:1.3.3-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-remote-naming0:1.0.8-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-remote-naming0:1.0.8-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-remoting30:3.2.19-1.GA_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jboss-remoting30:3.2.19-1.GA_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-security-negotiation0:2.2.7-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jboss-security-negotiation0:2.2.7-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jbossas-core0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jbossas-core0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jbossas-javadocs0:7.3.2-2.1.Final_redhat_2.ep6.el5
Red Hat jboss enterprise application platform 6jbossas-javadocs0:7.3.2-2.1.Final_redhat_2.ep6.el6
Red Hat jboss enterprise application platform 6jbossas-modules-eap0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jbossas-modules-eap0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jbossas-product-eap0:7.3.2-2.Final_redhat_2.1.ep6.el5
Red Hat jboss enterprise application platform 6jbossas-product-eap0:7.3.2-2.Final_redhat_2.1.ep6.el6
Red Hat jboss enterprise application platform 6jbossweb0:7.3.1-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6jbossweb0:7.3.1-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jbossws-cxf0:4.2.4-1.Final_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6jbossws-cxf0:4.2.4-1.Final_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6picketbox0:4.0.19-4.SP4_redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6picketbox0:4.0.19-4.SP4_redhat_1.1.ep6.el5
Red Hat jboss enterprise application platform 6wss4j0:1.6.14-2.redhat_1.1.ep6.el6
Red Hat jboss enterprise application platform 6wss4j0:1.6.14-2.redhat_1.1.ep6.el5