CVE-2011-1484

Current Description

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.

Referenced by CVEs:CVE-2011-2196

Basic Data

PublishedJuly 27, 2011
Last ModifiedOctober 26, 2011
Assignercve@mitre.org
Data TypeCVE
Data FormatMITRE
Data Version4.0
Problem TypeCWE-264
CVE Data Version4.0

Base Metric V2

CVSS 2 - Version2.0
CVSS 2 - Vector StringAV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS 2 - Access VectorNETWORK
CVSS 2 - Access ComplexityMEDIUM
CVSS 2 - AuthenticationNONE
CVSS 2 - Confidentiality ImpactPARTIAL
CVSS 2 - Availability ImpactPARTIAL
CVSS 2 - Base Score6.8
SeverityMEDIUM
Exploitability Score8.6
Impact Score6.4
Obtain All Privilegefalse
Obtain User Privilegefalse
Obtain Other Privilegefalse

Base Metric V3

No data provided.

Configurations

  • OR - Configuration 1
    Cpe VersionPartVendorProductVersionUpdateEditionLanguageSW EditionTarget SWTarget HWOtherVersion Start IncludingVersion End IncludingVersion Start ExcludingVersion End Excluding
    2.3ApplicationRedhatJboss Enterprise Application Platform4.3.0cp09******
    2.3ApplicationRedhatJboss Enterprise Application Platform5.1.0*******
    2.3ApplicationRedhatJboss Enterprise Soa Platform4.3.0cp04******
    2.3ApplicationRedhatJboss Enterprise Soa Platform5.1.0*******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.0beta1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.0cr1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.0cr2******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.0cr3******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.0ga******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.1cr1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.1cr2******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.1ga******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.2cr1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.2cr2******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.2ga******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.2sp1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.0.3cr1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.0alpha1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.0beta1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.0cr1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.0ga******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.0sp1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.1cr1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.1cr2******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.1ga******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.2*******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.2cr1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.1.2cr2******
    2.3ApplicationRedhatJboss Seam 2 Framework2.2.0cr1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.2.0ga******
    2.3ApplicationRedhatJboss Seam 2 Framework2.2.1*******
    2.3ApplicationRedhatJboss Seam 2 Framework2.2.1cr1******
    2.3ApplicationRedhatJboss Seam 2 Framework2.2.1cr2******
    2.3ApplicationRedhatJboss Seam 2 Framework2.2.1cr3******
    2.3ApplicationRedhatJboss Seam 2 Framework********2.2.2

Vulnerable Software List

VendorProductVersions
Redhat Jboss Enterprise Application Platform 4.3.0, 5.1.0
Redhat Jboss Seam 2 Framework *, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1
Redhat Jboss Enterprise Soa Platform 4.3.0, 5.1.0

References

NameSourceURLTags
RHSA-2011:0460http://www.redhat.com/support/errata/RHSA-2011-0460.htmlREDHATVendor Advisory
RHSA-2011:0461http://www.redhat.com/support/errata/RHSA-2011-0461.htmlREDHATVendor Advisory
RHSA-2011:0462http://www.redhat.com/support/errata/RHSA-2011-0462.htmlREDHATVendor Advisory
RHSA-2011:0463http://www.redhat.com/support/errata/RHSA-2011-0463.htmlREDHATVendor Advisory
RHSA-2011:1148http://www.redhat.com/support/errata/RHSA-2011-1148.htmlREDHAT
RHSA-2011:1251http://www.redhat.com/support/errata/RHSA-2011-1251.htmlREDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=692421https://bugzilla.redhat.com/show_bug.cgi?id=692421CONFIRM
https://docs.redhat.com/docs/en-US/JBoss_Communications_Platform/5.1/html/5.1.1_Release_Notes/ar01s05.htmlhttps://docs.redhat.com/docs/en-US/JBoss_Communications_Platform/5.1/html/5.1.1_Release_Notes/ar01s0CONFIRM