Vulnerability-Lookup

CERTA-2010-AVI-354

Vulnerability from certfr_avis - Published: 2010-08-04 - Updated: 2010-08-04

De nombreuses corrections ont été apportées à JBoss Enterprise SOA, dont deux concernant des vulnérabilités permettant le contournant de la politique de sécurité et l'élévation de privilèges.

Description

De nombreuses corrections ont été apportées à JBoss Enterprise SOA, dont deux concernant des vulnérabilités associées aux CVE CVE-2010-2474 et CVE-2010-2493. Ces vulnérabilités permettent à une personne malintentionnée de contourner la politique de sécurité ou d'élever ses privilèges. Les correctifs portent sur les bogues suivants : JBESB-3280, JBESB-3290, JBESB-3296, JBESB-3301, JBESB-3337, JBESB-3345, JBESB-3347, JBPM-2828, JBESB-2442, JBESB-2911, JBESB-3028, JBESB-3035, JBESB-3038, JBESB-3257, JBESB-3263, JBESB-3282, JBESB-3288, JBESB-3300, JBESB-3317, JBESB-3326, JBESB-3346, JBESB-3349, JBIDE-5596, JBIDE-5597, JBPAPP-3002, JOPR-419, SOA-952, SOA-1077, SOA-1168, SOA-1445, SOA-1446, SOA-1549, SOA-1564, SOA-1600, SOA-1623, SOA-1673, SOA-1711, SOA-1867, SOA-1916, SOA-1970, SOA-1981, SOA-2007, SOA-2029, SOA-2034, SOA-2083, SOA-2084, SOA-2086, SOA-2099, SOA-2105, SOA-2114, SOA-2120.

Solution

Se référer à la note de changements de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les versions antérieures des produits suivants :

JBoss EAP 5.0.1 ;
JBoss ESB 4.7 CPO02 ;
JBoss Rules 5.0.1 ;
JBoss jBPM 3.2.9 ;
Apache jUDDI 3.0.1 ;
PicketLink 1.0.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Note de changements de la version 5.0.2 de JBoss Enterprise SOA	None	vendor-advisory
Note de changements de JBoss Enterprise SOA 5.0.2 :	-	other

Show details on source website

JSON

To clipboard Create KEV Entry

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eLes versions ant\u00e9rieures des produits  suivants :  \u003cUL\u003e    \u003cLI\u003eJBoss EAP 5.0.1 ;\u003c/LI\u003e    \u003cLI\u003eJBoss ESB 4.7 CPO02 ;\u003c/LI\u003e    \u003cLI\u003eJBoss Rules 5.0.1 ;\u003c/LI\u003e    \u003cLI\u003eJBoss jBPM 3.2.9 ;\u003c/LI\u003e    \u003cLI\u003eApache jUDDI 3.0.1 ;\u003c/LI\u003e    \u003cLI\u003ePicketLink 1.0.\u003c/LI\u003e  \u003c/UL\u003e\u003c/p\u003e",
  "content": "## Description\n\nDe nombreuses corrections ont \u00e9t\u00e9 apport\u00e9es \u00e0 JBoss Enterprise SOA, dont\ndeux concernant des vuln\u00e9rabilit\u00e9s associ\u00e9es aux CVE CVE-2010-2474 et\nCVE-2010-2493. Ces vuln\u00e9rabilit\u00e9s permettent \u00e0 une personne\nmalintentionn\u00e9e de contourner la politique de s\u00e9curit\u00e9 ou d\u0027\u00e9lever ses\nprivil\u00e8ges. Les correctifs portent sur les bogues suivants : JBESB-3280,\nJBESB-3290, JBESB-3296, JBESB-3301, JBESB-3337, JBESB-3345, JBESB-3347,\nJBPM-2828, JBESB-2442, JBESB-2911, JBESB-3028, JBESB-3035, JBESB-3038,\nJBESB-3257, JBESB-3263, JBESB-3282, JBESB-3288, JBESB-3300, JBESB-3317,\nJBESB-3326, JBESB-3346, JBESB-3349, JBIDE-5596, JBIDE-5597, JBPAPP-3002,\nJOPR-419, SOA-952, SOA-1077, SOA-1168, SOA-1445, SOA-1446, SOA-1549,\nSOA-1564, SOA-1600, SOA-1623, SOA-1673, SOA-1711, SOA-1867, SOA-1916,\nSOA-1970, SOA-1981, SOA-2007, SOA-2029, SOA-2034, SOA-2083, SOA-2084,\nSOA-2086, SOA-2099, SOA-2105, SOA-2114, SOA-2120.\n\n## Solution\n\nSe r\u00e9f\u00e9rer \u00e0 la note de changements de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2010-2474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2474"
    },
    {
      "name": "CVE-2010-2493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2493"
    }
  ],
  "initial_release_date": "2010-08-04T00:00:00",
  "last_revision_date": "2010-08-04T00:00:00",
  "links": [
    {
      "title": "Note de changements de JBoss Enterprise SOA 5.0.2 :",
      "url": "http://www.redhat.com/docs/en_US/JBoss_SOA_Platform/5.0.2/html/5.0.2_Release_Notes/index.html"
    }
  ],
  "reference": "CERTA-2010-AVI-354",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2010-08-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De nombreuses corrections ont \u00e9t\u00e9 apport\u00e9es \u00e0 JBoss Enterprise SOA, dont\ndeux concernant des vuln\u00e9rabilit\u00e9s permettant le contournant de la\npolitique de s\u00e9curit\u00e9 et l\u0027\u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans JBoss Enterprise SOA",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Note de changements de la version 5.0.2 de JBoss Enterprise SOA",
      "url": null
    }
  ]
}

CVE-2010-2493 (GCVE-0-2010-2493)

Vulnerability from cvelistv5 – Published: 2010-08-09 20:00 – Updated: 2024-08-07 02:32

Summary

The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security_saml quickstart, (2) the webservice_proxy_security quickstart, (3) the web-console application, (4) the http-invoker application, (5) the gpd-deployer application, (6) the jbpm-console application, (7) the contract application, and (8) the uddi-console application in JBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method elements, which allows remote attackers to bypass intended access restrictions via a crafted HTTP request.

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=614774	x_refsource_CONFIRM
	https://jira.jboss.org/browse/SOA-2105	x_refsource_CONFIRM
	http://secunia.com/advisories/40681	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/docs/en-US/JBoss_SOA_Platfo…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard Create KEV Entry

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:32:16.845Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=614774"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://jira.jboss.org/browse/SOA-2105"
          },
          {
            "name": "40681",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40681"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/docs/en-US/JBoss_SOA_Platform/5.0.2/html/5.0.2_Release_Notes/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security_saml quickstart, (2) the webservice_proxy_security quickstart, (3) the web-console application, (4) the http-invoker application, (5) the gpd-deployer application, (6) the jbpm-console application, (7) the contract application, and (8) the uddi-console application in JBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method elements, which allows remote attackers to bypass intended access restrictions via a crafted HTTP request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-08-09T20:00:00Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=614774"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://jira.jboss.org/browse/SOA-2105"
        },
        {
          "name": "40681",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40681"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.redhat.com/docs/en-US/JBoss_SOA_Platform/5.0.2/html/5.0.2_Release_Notes/index.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-2493",
    "datePublished": "2010-08-09T20:00:00Z",
    "dateReserved": "2010-06-28T00:00:00Z",
    "dateUpdated": "2024-08-07T02:32:16.845Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2010-2474 (GCVE-0-2010-2474)

Vulnerability from cvelistv5 – Published: 2010-08-09 20:00 – Updated: 2024-08-07 02:32

Summary

JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service.

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://secunia.com/advisories/40568	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/40681	third-party-advisoryx_refsource_SECUNIA
	https://jira.jboss.org/browse/JBESB-3345	x_refsource_CONFIRM
	http://www.redhat.com/docs/en-US/JBoss_SOA_Platfo…	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=609442	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard Create KEV Entry

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:32:16.887Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40568",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40568"
          },
          {
            "name": "40681",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40681"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://jira.jboss.org/browse/JBESB-3345"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/docs/en-US/JBoss_SOA_Platform/5.0.2/html/5.0.2_Release_Notes/index.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=609442"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-08-09T20:00:00Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "40568",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40568"
        },
        {
          "name": "40681",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40681"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://jira.jboss.org/browse/JBESB-3345"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.redhat.com/docs/en-US/JBoss_SOA_Platform/5.0.2/html/5.0.2_Release_Notes/index.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=609442"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-2474",
    "datePublished": "2010-08-09T20:00:00Z",
    "dateReserved": "2010-06-28T00:00:00Z",
    "dateUpdated": "2024-08-07T02:32:16.887Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTA-2010-AVI-354

Description

Solution

CVE-2010-2493 (GCVE-0-2010-2493)

CVE-2010-2474 (GCVE-0-2010-2474)

Tags

Sightings

Nomenclature