Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy PicketBox SecurityDomain, and then reloaded to admin-only mode. This flaw allows an attacker to perform a complete authentication bypass by using an arbitrary user and password. The highest threat to vulnerability is to system availability.
CVSS Information
N/A
Vulnerability Type
认证机制不恰当
Vulnerability Title
PicketBox 授权问题漏洞
Vulnerability Description
PicketBox是个人开发者的一个Java安全框架。该框架可以提供认证支持、授权支持、审计支持、安全映射支持。 PicketBox Admin-only Mode Reload中存在安全漏洞。该漏洞允许攻击者进行特权提升。
CVSS Information
N/A
Vulnerability Type
N/A