medium5.8
CVE-2012-0052
Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identit…
Impact
Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Jboss Operations Network | through 2.4.1 Versions 2.0.0, 2.0.1, 2.1.0, 2.2, 2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2012-0089.html
- http://rhn.redhat.com/errata/RHSA-2012-0406.html
- https://bugzilla.redhat.com/show_bug.cgi?id=781964
- http://rhn.redhat.com/errata/RHSA-2012-0089.html
- http://rhn.redhat.com/errata/RHSA-2012-0406.html
- https://bugzilla.redhat.com/show_bug.cgi?id=781964