CVE-2010-1871

JBoss Seam 2 (jboss-seam2), Red Hat Linux uchun JBoss Enterprise Application Platform 4.3.0 da qo‘llanganidek, JBoss Expression Language (EL) iboralari uchun kirishlarni to‘g‘ri sanitarizatsiya qilmaydi, bu esa masofaviy tajovuzkorlarga yaratilgan URL orqali ixtiyoriy kodni bajarishga imkon beradi. QAYD: bu faqat Java Xavfsizlik menejeri to'g'ri sozlanmagandagi zaiflikdir.

CVSS Vector

Manbalar

• http://archives.neohapsis.com/archives/bugtraq/2013-05/0117.html
• http://www.redhat.com/support/errata/RHSA-2010-0564.html
• http://www.securityfocus.com/bid/41994
• http://www.securitytracker.com/id?1024253
• http://www.vupen.com/english/advisories/2010/1929