Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jboss EAP Improper Authentication Vulnerability - CVE-2011-4085 - Vulnerability Database
Jboss EAP

Jboss EAP Improper Authentication Vulnerability - CVE-2011-4085

Medium
Reference: CVE-2011-4085
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-4085
Title: Jboss EAP Improper Authentication Vulnerability
Overview:

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2 SOA Platform before 5.2.0 BRMS Platform before 5.3.0 and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.