CVE-2015-5304

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.5 does not properly authorize access to shut down the server, which allows remote authenticated users with the Monitor, Deployer, or Auditor role to cause a denial of service via unspecified vectors.

Metrics

CVSS 2.0 3.5/10AV:N/AC:M/Au:S/C:N/I:N/A:P

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://rhn.redhat.com/errata/RHSA-2015-2538.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2539.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2540.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2541.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2542.htmlVendor Advisory
http://www.securitytracker.com/id/1034280
https://bugzilla.redhat.com/show_bug.cgi?id=1273046Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2538.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2539.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2540.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2541.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2542.htmlVendor Advisory
http://www.securitytracker.com/id/1034280
https://bugzilla.redhat.com/show_bug.cgi?id=1273046Vendor Advisory

Timeline

Published: Dec 16, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-53056.4Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files v CVE-2015-53066.8OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access th CVE-2015-53074.9The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host O CVE-2015-53087.5Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execu CVE-2015-53094.3Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (memory corruption) or p CVE-2015-53104.3The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protecti CVE-2015-53115.0PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and serv CVE-2015-53127.1The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context CVE-2015-53132.5Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine CVE-2015-53145.9The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large CVE-2015-53155.9The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large en CVE-2015-53165.9The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network c