« Volver al listado

CVE-2007-1354

Estado: ModificadaMedia (6)—

The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles of the current user, which allows remote authenticated administrators to trigger a race condition and gain privileges by logging in during a session by a more privileged administrator, as demonstrated by privilege escalation from Read Mode to Write Mode.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Jboss — Jboss Application Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1354",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-07-27T21:30:00.000",
  "references": [
    {
      "url": "http://jira.jboss.com/jira/browse/ASPATCH-172",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://jira.jboss.com/jira/browse/ASPATCH-175",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://osvdb.org/46765",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2007-0151.html",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.redhat.com/archives/jboss-watch-list/2007-April/msg00000.html",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://jira.jboss.com/jira/browse/ASPATCH-172",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jira.jboss.com/jira/browse/ASPATCH-175",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/46765",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2007-0151.html",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.redhat.com/archives/jboss-watch-list/2007-April/msg00000.html",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles of the current user, which allows remote authenticated administrators to trigger a race condition and gain privileges by logging in during a session by a more privileged administrator, as demonstrated by privilege escalation from Read Mode to Write Mode."
    },
    {
      "lang": "es",
      "value": "La funcionalidad Control de Acceso (JMXOpsAccessControlFilter) en JMX Console de JBoss Application Server 4.0.2 y 4.0.5 versiones anteriores a 20070416 utiliza una variable miembro para almacenar los roles del usuario actual, lo cual permite a administradores remotos autenticados disparar una condición de carrera y obtener privilegios al identificarse en una sesión, por los de otro administrador con más privilegios, como se demuestra con un escalado de privilegios de Modo Lectura a Modo Escritura."
    }
  ],
  "lastModified": "2026-06-16T22:37:24.840",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.2.ga_cp02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7035F76-F6FF-477D-91F4-1663F2008699"
            },
            {
              "criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.2.ga_cp03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D882D74-F526-404D-9BB3-88DC3D355FBD"
            },
            {
              "criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.2.ga_cp04:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EAE9B8C-A1BE-42C8-9682-216D27AF7146"
            },
            {
              "criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.5.ga:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2559DFD5-A230-467E-A720-7AE7FA9309CD"
            },
            {
              "criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.5_cp01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DABC5FBF-A500-4A80-885B-FBEACFB7393E"
            },
            {
              "criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.5_cp02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3F772B0-5BC2-4AE4-AEA7-F22375039025"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}