CVE-2014-3518: Code Injection
First published: Tue Jul 22 2014(Updated: )
jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA Platform 5.3.1, does not properly implement the JSR 160 specification, which allows remote attackers to execute arbitrary code via unspecified vectors.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat jboss enterprise application platform | =5.2.0 | |
| Red Hat JBoss Enterprise BRMS Platform | =5.3.1 | |
| Red Hat JBoss Portal | =5.2.2 | |
| Red Hat JBoss Enterprise SOA Platform | =5.3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-3518?
CVE-2014-3518 is considered to be of high severity due to its potential to allow remote code execution.
How do I fix CVE-2014-3518?
To fix CVE-2014-3518, upgrade to the latest versions of affected JBoss products as recommended by Red Hat.
Which versions are affected by CVE-2014-3518?
CVE-2014-3518 affects JBoss Enterprise Application Platform 5.2.0, JBoss BRMS 5.3.1, JBoss Portal 5.2.2, and JBoss SOA Platform 5.3.1.
Can CVE-2014-3518 be exploited remotely?
Yes, CVE-2014-3518 can be exploited remotely by attackers due to improper implementation of the JSR 160 specification.
What should I do if I am using an affected version related to CVE-2014-3518?
If you are using an affected version related to CVE-2014-3518, you should prioritize upgrading to a patched version to mitigate the vulnerability.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/redhat
- canonical/redhat jboss enterprise application platform
- version/redhat jboss enterprise application platform/5.2.0
- canonical/red hat jboss enterprise brms platform
- version/red hat jboss enterprise brms platform/5.3.1
- canonical/red hat jboss portal
- version/red hat jboss portal/5.2.2
- canonical/red hat jboss enterprise soa platform
- version/red hat jboss enterprise soa platform/5.3.1