Description
Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security token.
References
- RHSA-2012:0089 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=783008
- RHSA-2012:0406 vendor-advisory