CVE-2014-0248

CWE-94 — Code Injection5 documents5 sources
Severity
6.8MEDIUM
EPSS
2.3%
top 15.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Redhat Jboss Enterprise Application PlatformRedhat Jboss Enterprise WEB PlatformRedhat Jboss WEB Framework KIT
Timeline
PublishedJul 7
Latest updateMay 14

Description

org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-q9w9-gcjg-v636: org↗2022-05-14
▶
CVEList
CVE-2014-0248: org↗2014-07-07
▶

📋Vendor Advisories

1
Red Hat
Seam: RCE via unsafe logging in AuthenticationFilter↗2014-06-23
▶

💬Community

1
Bugzilla
CVE-2014-0248 JBoss Seam: RCE via unsafe logging in AuthenticationFilter↗2014-05-27
▶