CVE-2012-1154
First published: Mon Mar 12 2012(Updated: )
mod_cluster 1.0.10 CP02 and 1.1.3 registers and exposes the root context of a server by default, despite ROOT being in the excludedContexts list. This is due to a regression that bypassed context filtering for the root context, causing the root context to be enabled inadvertently. This flaw is fixed in mod_cluster 1.0.10 CP03 and 1.1.4.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Jboss Enterprise Application Platform | =5.1.2 | |
| Redhat Mod Cluster | =1.0.10 | |
| Redhat Mod Cluster | =1.1.0 | |
| Redhat Mod Cluster | =1.1.1 | |
| Redhat Mod Cluster | =1.1.2 | |
| Redhat Mod Cluster | =1.1.3 | |
| Redhat Mod Cluster | =1.1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://issues.jboss.org/browse/MODCLUSTER-253
- https://rhn.redhat.com/errata/RHSA-2012-1012.html
- https://rhn.redhat.com/errata/RHSA-2012-1011.html
- https://rhn.redhat.com/errata/RHSA-2012-1010.html
- https://rhn.redhat.com/errata/RHSA-2012-1052.html
- https://rhn.redhat.com/errata/RHSA-2012-1053.html
- https://rhn.redhat.com/errata/RHSA-2012-1166.html
- https://bugzilla.redhat.com/show_bug.cgi?id=802200
- http://rhn.redhat.com/errata/RHSA-2012-1010.html
- http://rhn.redhat.com/errata/RHSA-2012-1011.html
- http://rhn.redhat.com/errata/RHSA-2012-1012.html
- http://rhn.redhat.com/errata/RHSA-2012-1052.html
- http://rhn.redhat.com/errata/RHSA-2012-1053.html
- http://rhn.redhat.com/errata/RHSA-2012-1166.html
- http://secunia.com/advisories/49636
- https://community.jboss.org/message/624018
- collector/redhat-bugzilla
- alias/CVE-2012-1154
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/references
- agent/event
- vendor/redhat
- canonical/redhat jboss enterprise application platform
- version/redhat jboss enterprise application platform/5.1.2
- canonical/redhat mod cluster
- version/redhat mod cluster/1.0.10
- version/redhat mod cluster/1.1.0
- version/redhat mod cluster/1.1.1
- version/redhat mod cluster/1.1.2
- version/redhat mod cluster/1.1.3
- version/redhat mod cluster/1.1.4