CVE-2010-2474

EUVD-2010-2483
JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.5 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
Affected Products (NVD)
VendorProductVersion
redhatjboss_enterprise_service_bus
𝑥
≤ 4.7
redhatjboss_enterprise_service_bus
4.0
redhatjboss_enterprise_service_bus
4.2
redhatjboss_enterprise_service_bus
4.2.1
redhatjboss_enterprise_service_bus
4.3
redhatjboss_enterprise_service_bus
4.4
redhatjboss_enterprise_service_bus
4.5
redhatjboss_enterprise_service_bus
4.6
redhatjboss_enterprise_soa_platform
4.2.0
redhatjboss_enterprise_soa_platform
4.2.0:cp01
redhatjboss_enterprise_soa_platform
4.2.0:cp02
redhatjboss_enterprise_soa_platform
4.2.0:cp03
redhatjboss_enterprise_soa_platform
4.2.0:cp04
redhatjboss_enterprise_soa_platform
4.2.0:cp05
redhatjboss_enterprise_soa_platform
4.2.0:tp02
redhatjboss_enterprise_soa_platform
4.3.0
redhatjboss_enterprise_soa_platform
4.3.0:cp01
redhatjboss_enterprise_soa_platform
4.3.0:cp02
redhatjboss_enterprise_soa_platform
4.3.0:cp03
redhatjboss_enterprise_soa_platform
4.3.0:cp04
redhatjboss_enterprise_soa_platform
5.0.0
redhatjboss_enterprise_soa_platform
5.0.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
jbossas4
artful
dne
bionic
dne
cosmic
dne
dapper
dne
disco
dne
hardy
ignored
jaunty
ignored
karmic
ignored
lucid
ignored
maverick
ignored
natty
ignored
oneiric
ignored
precise
ignored
quantal
ignored
raring
ignored
saucy
ignored
trusty
dne
utopic
ignored
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne