[jboss-jira] [JBoss JIRA] (JBADMCON-172) CVE-2010-1871 still affects the Admin Console deployed in JBoss AS 5 and 6

CVE-2010-1871 still affects the Admin Console deployed in JBoss AS 5 and 6 -------------------------------------------------------------------------- Key: JBADMCON-172 URL: https://issues.jboss.org/browse/JBADMCON-172 Project: JBoss Admin Console Issue Type: Bug Components: General Console Affects Versions: 1.0 alpha, 1.1 alpha, 2.0 alpha Reporter: Renaud Dubourguais The version of the SEAM framework used by the Admin Console in JBoss AS 5 and 6 is still affected by the CVE-2010-1871. (The Red Hat version is already patched). This vulnerability allows pre-authentication remote code execution and functional public exploits exist. For more details about this issue: - http://blog.o0o.nu/2010/07/cve-2010-1871-jboss-seam-framework.html - https://access.redhat.com/security/cve/CVE-2010-1871