Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getConnection function call, which allows remote attackers to obtain access to an arbitrary datasource connection in opportunistic circumstances via an invalid connection attempt.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IronJacamar Security Domains ‘allow-multiple-users’ 信任管理漏洞
Vulnerability Description
IronJacamar是JBoss项目组里JCA 1.6的实现。 JBoss Application Server中的IronJacamar容器1.0.12.Final之前版本中存在漏洞。当在安全区域中启用了‘allow-multiple-users’的条件下，程序没有使用getConnection函数调用所提供的凭证。通过无效的连接尝试，远程攻击者利用该漏洞在伺机情况下获得对任意数据源连接的访问权。
CVSS Information
N/A
Vulnerability Type
N/A