CERTA-2011-AVI-671
Vulnerability from certfr_avis - Published: 2011-12-05 - Updated: 2011-12-05
Deux vulnérabilités de JBoss permettent respectivement de l'injection de code indirecte à distance et de l'injection de requêtes illégitimes par rebond.
Description
Une vulnérabilité dans l'interface d'administration de JBoss est due à un manque de filtrage d'entrées, dont le paramètre onerror. Cette insuffisance est exploitable pour réaliser des injections de code indirectes à distance (XSS).
Un défaut de restriction des accès par cette même console d'administration permet à un utilisateur malveillant d'injecter des requêtes illégitimes par rebond (CSRF).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
JBoss AS 7.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eJBoss AS 7.\u003c/p\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans l\u0027interface d\u0027administration de JBoss est due \u00e0\nun manque de filtrage d\u0027entr\u00e9es, dont le param\u00e8tre onerror. Cette\ninsuffisance est exploitable pour r\u00e9aliser des injections de code\nindirectes \u00e0 distance (XSS).\n\nUn d\u00e9faut de restriction des acc\u00e8s par cette m\u00eame console\nd\u0027administration permet \u00e0 un utilisateur malveillant d\u0027injecter des\nrequ\u00eates ill\u00e9gitimes par rebond (CSRF).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2011-3606",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3606"
},
{
"name": "CVE-2011-3609",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3609"
}
],
"initial_release_date": "2011-12-05T00:00:00",
"last_revision_date": "2011-12-05T00:00:00",
"links": [
{
"title": "Bulletin de suivi de bogues JBoss AS7-2400 du 01 d\u00e9cembre 2011 :",
"url": "https://issues.jboss.org/browse/AS7-2400"
}
],
"reference": "CERTA-2011-AVI-671",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2011-12-05T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Injection de code indirecte \u00e0 distance"
}
],
"summary": "Deux vuln\u00e9rabilit\u00e9s de JBoss permettent respectivement de l\u0027injection de\ncode indirecte \u00e0 distance et de l\u0027injection de requ\u00eates ill\u00e9gitimes par\nrebond.\n",
"title": "Vuln\u00e9rabilit\u00e9s dans JBoss",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de suivi de bogues JBoss AS7-2400 du 01 d\u00e9cembre 2011",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…