cnvd-2017-01281
Vulnerability from cnvd
Title: Red Hat JBoss Enterprise Application Platform本地权限提升漏洞
Description:
Red Hat JBoss Enterprise Application Platform（EAP）是美国红帽（Red Hat）公司的一套开源、基于J2EE的中间件平台。该平台主要用于构建、部署和托管Java应用程序与服务。
Red Hat JBoss Enterprise Application Platform存在本地提权漏洞，本地攻击者利用该漏洞获取提升的权限。
Severity: 中
Patch Name: Red Hat JBoss Enterprise Application Platform本地权限提升漏洞的补丁
Patch Description:
Red Hat JBoss Enterprise Application Platform（EAP）是美国红帽（Red Hat）公司的一套开源、基于J2EE的中间件平台。该平台主要用于构建、部署和托管Java应用程序与服务。
Red Hat JBoss Enterprise Application Platform存在本地提权漏洞，本地攻击者利用该漏洞获取提升的权限。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description:
厂商已发布了漏洞修复程序，请及时关注更新： https://bugzilla.redhat.com/show_bug.cgi?id=1400344
Reference: http://www.securityfocus.com/bid/96035
Impacted products
| Name | ['Red Hat JBoss Enterprise Application Platform 6.4', 'Red Hat JBoss Enterprise Application Platform (for RHEL 7) 6.4', 'Red Hat JBoss Enterprise Application Platform (for RHEL 6) 6.4', 'Red Hat JBoss Enterprise Application Platform (for RHEL 5) 6.4'] |
|---|
{
"bids": {
"bid": {
"bidNumber": "96035"
}
},
"cves": {
"cve": {
"cveNumber": "CVE-2016-8656"
}
},
"description": "Red Hat JBoss Enterprise Application Platform\uff08EAP\uff09\u662f\u7f8e\u56fd\u7ea2\u5e3d\uff08Red Hat\uff09\u516c\u53f8\u7684\u4e00\u5957\u5f00\u6e90\u3001\u57fa\u4e8eJ2EE\u7684\u4e2d\u95f4\u4ef6\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u4e3b\u8981\u7528\u4e8e\u6784\u5efa\u3001\u90e8\u7f72\u548c\u6258\u7ba1Java\u5e94\u7528\u7a0b\u5e8f\u4e0e\u670d\u52a1\u3002\r\n\r\nRed Hat JBoss Enterprise Application Platform\u5b58\u5728\u672c\u5730\u63d0\u6743\u6f0f\u6d1e\uff0c\u672c\u5730\u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u63d0\u5347\u7684\u6743\u9650\u3002",
"discovererName": "Red Hat",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1400344",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2017-01281",
"openTime": "2017-02-14",
"patchDescription": "Red Hat JBoss Enterprise Application Platform\uff08EAP\uff09\u662f\u7f8e\u56fd\u7ea2\u5e3d\uff08Red Hat\uff09\u516c\u53f8\u7684\u4e00\u5957\u5f00\u6e90\u3001\u57fa\u4e8eJ2EE\u7684\u4e2d\u95f4\u4ef6\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u4e3b\u8981\u7528\u4e8e\u6784\u5efa\u3001\u90e8\u7f72\u548c\u6258\u7ba1Java\u5e94\u7528\u7a0b\u5e8f\u4e0e\u670d\u52a1\u3002\r\n\r\nRed Hat JBoss Enterprise Application Platform\u5b58\u5728\u672c\u5730\u63d0\u6743\u6f0f\u6d1e\uff0c\u672c\u5730\u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u63d0\u5347\u7684\u6743\u9650\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Red Hat JBoss Enterprise Application Platform\u672c\u5730\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": [
"Red Hat JBoss Enterprise Application Platform 6.4",
"Red Hat JBoss Enterprise Application Platform (for RHEL 7) 6.4",
"Red Hat JBoss Enterprise Application Platform (for RHEL 6) 6.4",
"Red Hat JBoss Enterprise Application Platform (for RHEL 5) 6.4"
]
},
"referenceLink": "http://www.securityfocus.com/bid/96035",
"serverity": "\u4e2d",
"submitTime": "2017-02-07",
"title": "Red Hat JBoss Enterprise Application Platform\u672c\u5730\u6743\u9650\u63d0\u5347\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…