certfr_avis - certa-2011-avi-265

CERTA-2011-AVI-265

Vulnerability from certfr_avis

Une vulnérabilité dans JBoss Seam 2 permet à un utilisateur malveillant d'exécuter du code arbitraire à distance au moyen d'une URL spécialement conçue.

Description

Le cadre de développement JBoss Seam 2 n'applique pas les restrictions nécessaires dans le traitement d'exceptions. Cette insuffisance est exploitable par un utilisateur malveillant pour exécuter du code Java sur le système vulnérable.

Solution

Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

JBoss Seam 2 et les applications construites à partir de ce cadre de développement.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletins RedHat du 20 avril 2011	None	vendor-advisory
Bulletins de sécurité RedHat RHSA-2011:0460 à 0463 du 20 avril 2011 :	-	other
Bulletins de sécurité RedHat RHSA-2011:0460 à 0463 du 20 avril 2011 :	-	other
Bulletins de sécurité RedHat RHSA-2011:0460 à 0463 du 20 avril 2011 :	-	other
Bulletins de sécurité RedHat RHSA-2011:0460 à 0463 du 20 avril 2011 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eJBoss Seam 2 et les applications  construites \u00e0 partir de ce cadre de d\u00e9veloppement.\u003c/p\u003e",
  "content": "## Description\n\nLe cadre de d\u00e9veloppement JBoss Seam 2 n\u0027applique pas les restrictions\nn\u00e9cessaires dans le traitement d\u0027exceptions. Cette insuffisance est\nexploitable par un utilisateur malveillant pour ex\u00e9cuter du code Java\nsur le syst\u00e8me vuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-1484",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1484"
    }
  ],
  "initial_release_date": "2011-04-28T00:00:00",
  "last_revision_date": "2011-04-28T00:00:00",
  "links": [
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0460 \u00e0 0463 du 20    avril 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0463.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0460 \u00e0 0463 du 20    avril 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0462.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0460 \u00e0 0463 du 20    avril 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0460.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0460 \u00e0 0463 du 20    avril 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0461.html"
    }
  ],
  "reference": "CERTA-2011-AVI-265",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-04-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans JBoss Seam 2 permet \u00e0 un utilisateur malveillant\nd\u0027ex\u00e9cuter du code arbitraire \u00e0 distance au moyen d\u0027une URL sp\u00e9cialement\ncon\u00e7ue.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans JBoss",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins RedHat du 20 avril 2011",
      "url": null
    }
  ]
}

CVE-2011-1484 (GCVE-0-2011-1484)

Vulnerability from cvelistv5

Published

2011-07-27 01:00

Modified

2024-08-06 22:28

Severity ?

CWE

Summary

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.

References

URL

Tags

	http://www.redhat.com/support/errata/RHSA-2011-1251.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=692421	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2011-0462.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2011-0463.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2011-0461.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2011-0460.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2011-1148.html	vendor-advisory, x_refsource_REDHAT
	https://docs.redhat.com/docs/en-US/JBoss_Communications_Platform/5.1/html/5.1.1_Release_Notes/ar01s05.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:28:41.792Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2011:1251",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1251.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=692421"
          },
          {
            "name": "RHSA-2011:0462",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0462.html"
          },
          {
            "name": "RHSA-2011:0463",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0463.html"
          },
          {
            "name": "RHSA-2011:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0461.html"
          },
          {
            "name": "RHSA-2011:0460",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0460.html"
          },
          {
            "name": "RHSA-2011:1148",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1148.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://docs.redhat.com/docs/en-US/JBoss_Communications_Platform/5.1/html/5.1.1_Release_Notes/ar01s05.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-04-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-08-23T09:00:00",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2011:1251",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1251.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=692421"
        },
        {
          "name": "RHSA-2011:0462",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0462.html"
        },
        {
          "name": "RHSA-2011:0463",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0463.html"
        },
        {
          "name": "RHSA-2011:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0461.html"
        },
        {
          "name": "RHSA-2011:0460",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0460.html"
        },
        {
          "name": "RHSA-2011:1148",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1148.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://docs.redhat.com/docs/en-US/JBoss_Communications_Platform/5.1/html/5.1.1_Release_Notes/ar01s05.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1484",
    "datePublished": "2011-07-27T01:00:00",
    "dateReserved": "2011-03-21T00:00:00",
    "dateUpdated": "2024-08-06T22:28:41.792Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTA-2011-AVI-265

Vulnerability from certfr_avis

Description

Solution

CVE-2011-1484 (GCVE-0-2011-1484)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature