CVE-2011-4085 Auth bypass in n/a
Remote attackers can bypass authentication in JBoss platforms by using HTTP methods other than GET or POST, gaining unauthorized access to servlets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-4085?
CVE-2011-4085 is a medium-severity authentication bypass vulnerability in Redhat Jboss Enterprise Application Platform, published on 23 Nov 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.
Weakness: CWE-287
Which versions are affected by CVE-2011-4085?
It affects 4 products.
Products include Redhat Jboss Enterprise Application Platform, Redhat Jboss Enterprise Brms Platform, Redhat Jboss Enterprise Portal Platform, Redhat Jboss Enterprise Soa Platform.
How do I fix CVE-2011-4085?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2011-4085 being exploited?
There is no known exploitation of CVE-2011-4085 in the wild and no public exploit code.
Other vulnerabilities in Redhat Jboss Enterprise Application Platform
- CVE-2017-12149 Red Hat JBoss Application Server Remote Code Execution
- CVE-2010-1428 Red Hat JBoss Information Disclosure
- CVE-2010-0738 Red Hat JBoss Authentication Bypass
- CVE-2016-3690 Deserialization in n/a
- CVE-2017-7504 Deserialization in JBoss
All Redhat Jboss Enterprise Application Platform vulnerabilities
Sources
Also known as GHSA-24wp-35x7-5hx9.