Vulnerability Description
JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Jboss Enterprise Portal Platform | <= 5.2.1 |
| Redhat | Jboss Enterprise Soa Platform | <= 5.2.0 |
| Redhat | Jboss Enterprise Brms Platform | <= 5.2.0 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2012-1028.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1125.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1232.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0191.html
- http://rhn.redhat.com/errata/RHSA-2013-0192.html
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
- http://rhn.redhat.com/errata/RHSA-2013-0194.html
- http://rhn.redhat.com/errata/RHSA-2013-0195.html
- http://rhn.redhat.com/errata/RHSA-2013-0196.html
- http://rhn.redhat.com/errata/RHSA-2013-0197.html
- http://rhn.redhat.com/errata/RHSA-2013-0198.html
- http://secunia.com/advisories/49669Vendor Advisory
- http://secunia.com/advisories/50084Vendor Advisory
- http://secunia.com/advisories/50549Vendor Advisory
- http://secunia.com/advisories/51984
FAQ
What is CVE-2012-2377?
CVE-2012-2377 is a vulnerability with a CVSS score of 3.3 (LOW). JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups c...
How severe is CVE-2012-2377?
CVE-2012-2377 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-2377?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Jboss Enterprise Portal Platform, Redhat Jboss Enterprise Soa Platform, Redhat Jboss Enterprise Brms Platform.