CVE-2011-4085

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://rhn.redhat.com/errata/RHSA-2011-1456.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2011-1798.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2011-1799.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2011-1800.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2011-1805.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2011-1822.html
http://rhn.redhat.com/errata/RHSA-2012-0091.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1028.htmlVendor Advisory
http://secunia.com/advisories/47169Vendor Advisory
http://secunia.com/advisories/47866Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=750422
http://rhn.redhat.com/errata/RHSA-2011-1456.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2011-1798.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2011-1799.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2011-1800.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2011-1805.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2011-1822.html
http://rhn.redhat.com/errata/RHSA-2012-0091.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1028.htmlVendor Advisory
http://secunia.com/advisories/47169Vendor Advisory
http://secunia.com/advisories/47866Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=750422

Timeline

Published: Nov 23, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-40864.9The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritt CVE-2011-40877.5The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initialize a certain data CVE-2011-40887.5ABRT might allow attackers to obtain sensitive information from crash reports.CVE-2011-40894.6The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction,CVE-2011-40906.1Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.CVE-2011-40915.0The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, whic CVE-2011-40925.8obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.CVE-2011-40935.8Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privilege CVE-2011-40949.8Jara 1.6 has a SQL injection vulnerability.CVE-2011-40956.1Jara 1.6 has an XSS vulnerability CVE-2011-40965.0The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service CVE-2011-40975.5Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cau