CVE-2014-7849

The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization…

published February 13, 2015

CVSS
—
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization conditions, which allows remote authenticated users to add, modify, and undefine otherwise restricted attributes by leveraging the Maintainer role.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01260 · 69.2th percentile
Published
2015-02-13T15:00Z
EPSS history
Timeline
  • 13 FEB 15:00Z
    The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization…
    cvelistv5