CVE-2014-0248
Fixed in a distro release EPSS 4%
org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.
Products: redhat jboss_enterprise_application_platform, redhat jboss_enterprise_web_platform, redhat jboss_web_framework_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 5 | jboss-seam2 | 0:2.2.6.EAP5-16.el6_5 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2 | 0:2.2.6.EAP5-12.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2 | 0:2.2.6.EAP5-10.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2-docs | 0:2.2.6.EAP5-10.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2-docs | 0:2.2.6.EAP5-16.el6_5 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2-docs | 0:2.2.6.EAP5-12.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2-examples | 0:2.2.6.EAP5-16.el6_5 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2-examples | 0:2.2.6.EAP5-12.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2-examples | 0:2.2.6.EAP5-10.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2-runtime | 0:2.2.6.EAP5-12.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2-runtime | 0:2.2.6.EAP5-10.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jboss-seam2-runtime | 0:2.2.6.EAP5-16.el6_5 |
| Red Hat jboss enterprise web platform 5 | jboss-seam2 | 0:2.2.6.EAP5-16.el6_5 |
| Red Hat jboss enterprise web platform 5 | jboss-seam2 | 0:2.2.6.EAP5-12.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jboss-seam2-docs | 0:2.2.6.EAP5-16.el6_5 |
| Red Hat jboss enterprise web platform 5 | jboss-seam2-docs | 0:2.2.6.EAP5-12.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jboss-seam2-examples | 0:2.2.6.EAP5-16.el6_5 |
| Red Hat jboss enterprise web platform 5 | jboss-seam2-examples | 0:2.2.6.EAP5-12.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jboss-seam2-runtime | 0:2.2.6.EAP5-16.el6_5 |
| Red Hat jboss enterprise web platform 5 | jboss-seam2-runtime | 0:2.2.6.EAP5-12.ep5.el5 |