CVE-2011-1484 Code injection in n/a

Medium 6.8 Published 27 Jul 2011 Updated 6 Aug 2024

Remote attackers can execute arbitrary Java code via crafted URLs due to improper restriction of Expression Language statements in JBoss Seam.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2011-1484?

CVE-2011-1484 is a medium-severity code injection vulnerability in Redhat Jboss Enterprise Application Platform, published on 27 Jul 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.

Weakness: CWE-264

Which versions are affected by CVE-2011-1484?

It affects 3 products.

Linux distribution packages (12)

`jboss-seam2` Red Hat:jboss_enterprise_application_platform:4.3.0::el4	All versions	`0:2.0.2.FP-1.ep1.27.el4`
`jboss-seam2-docs` Red Hat:jboss_enterprise_application_platform:4.3.0::el4	All versions	`0:2.0.2.FP-1.ep1.27.el4`
`jboss-seam2` Red Hat:jboss_enterprise_application_platform:4.3.0::el5	All versions	`0:2.0.2.FP-1.ep1.27.el5`
`jboss-seam2-docs` Red Hat:jboss_enterprise_application_platform:4.3.0::el5	All versions	`0:2.0.2.FP-1.ep1.27.el5`
`jboss-seam2` Red Hat:jboss_enterprise_application_platform:5::el4	All versions	`0:2.2.2.EAP-17.el4_8`
`jboss-seam2-docs` Red Hat:jboss_enterprise_application_platform:5::el4	All versions	`0:2.2.2.EAP-17.el4_8`
`jboss-seam2-examples` Red Hat:jboss_enterprise_application_platform:5::el4	All versions	`0:2.2.2.EAP-17.el4_8`
`jboss-seam2-runtime` Red Hat:jboss_enterprise_application_platform:5::el4	All versions	`0:2.2.2.EAP-17.el4_8`
`jboss-seam2` Red Hat:jboss_enterprise_application_platform:5::el5	All versions	`0:2.2.2.EAP-17.ep5.el5`
`jboss-seam2-docs` Red Hat:jboss_enterprise_application_platform:5::el5	All versions	`0:2.2.2.EAP-17.ep5.el5`
`jboss-seam2-examples` Red Hat:jboss_enterprise_application_platform:5::el5	All versions	`0:2.2.2.EAP-17.ep5.el5`
`jboss-seam2-runtime` Red Hat:jboss_enterprise_application_platform:5::el5	All versions	`0:2.2.2.EAP-17.ep5.el5`

Products include Redhat Jboss Enterprise Application Platform, Redhat Jboss Enterprise Soa Platform, Redhat Jboss Seam 2 Framework.

How do I fix CVE-2011-1484?

Apply the vendor's patch.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2011-1484 being exploited?

There is no known exploitation of CVE-2011-1484 in the wild and no public exploit code.

All Redhat Jboss Enterprise Application Platform vulnerabilities

Sources

Also known as GHSA-x438-vrwx-gvfx, RHSA-2011:0460, RHSA-2011:0461.