Skip to content
OpenAdvisories
Unscored CVE-2015-0297 EUVD-2015-0310GHSA-hfm5-vrw2-7m5q

Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrar…

Published Apr 24, 2015 · Updated Aug 6, 2024 · Assigned by redhat

Description

Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager.

References