NetSight
low3.5

CVE-2010-2474

JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a se…

Impact

JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service.

Affected products

VendorProductAffected versions
RedhatJboss Enterprise Service Bus
through 4.7
Versions 4.0, 4.2, 4.2.1, 4.3, 4.4
RedhatJboss Enterprise Soa Platform
Versions 4.2.0, 4.3.0, 5.0.0, 5.0.1

Weakness classification

References