What’s Vulnerable › Vulnerabilities

CVE-2011-4573

• Severity: low (CVSS 3.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-01 · updated 2026-06-16
• Weakness: CWE-264

Description

Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.

Affected products

• Red Hat JBoss: through 2.4.1; 1.0.0, 2.0.0, 2.0.1, 2.1.0, 2.2, 2.3 (+2)

References

• http://rhn.redhat.com/errata/RHSA-2012-0089.html
• https://bugzilla.redhat.com/show_bug.cgi?id=760024
• http://rhn.redhat.com/errata/RHSA-2012-0089.html
• https://bugzilla.redhat.com/show_bug.cgi?id=760024

Get alerted when CVE-2011-4573 or the next vulnerability affects your stack