CVE-2011-4573
published 2014-04-01CVE-2011-4573: Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a…
PriorityP415low3.5CVSS 2.0
AVNACMAuSCNIPAN
EPSS
0.81%
52.7th percentile
Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | jboss_operations_network | <= 2.4.1 | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
CVSS provenance
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
vendor_redhat3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
JON: Incorrect delete permissions check
vendor_redhat·2011-12-08·CVSS 3.5
CVE-2011-4573 [LOW] JON: Incorrect delete permissions check
JON: Incorrect delete permissions check
Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.
Package: Security (Red Hat JBoss BRMS 5) - Not affected
GHSA
GHSA-5298-jrhg-c6hc: Red Hat JBoss Operations Network (JON) before 2
ghsa_unreviewed·2022-05-17
CVE-2011-4573 [LOW] GHSA-5298-jrhg-c6hc: Red Hat JBoss Operations Network (JON) before 2
Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.
No detection rules found.
No public exploits indexed.
2014-04-01
Published