Back

LOW

JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started

Published Nov 23, 2012

Description

JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.

Affected products

Remediation

No remediation recorded yet.

Metrics

References (22)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Nov 23, 2012
Updated Aug 6, 2024
Reserved Apr 19, 2012
NVD
Status Modified
Modified Jun 16, 2026
Red Hat
Severity Low
Public date Jun 12, 2012