Description
org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.
Remediation
References
http://rhn.redhat.com/errata/RHSA-2014-0785.html
http://rhn.redhat.com/errata/RHSA-2014-0791.html
http://rhn.redhat.com/errata/RHSA-2014-0792.html
http://rhn.redhat.com/errata/RHSA-2014-0793.html
http://rhn.redhat.com/errata/RHSA-2014-0794.html
http://rhn.redhat.com/errata/RHSA-2015-1888.html
http://secunia.com/advisories/59346
http://secunia.com/advisories/59554
http://secunia.com/advisories/59555
http://www.securitytracker.com/id/1030457
Related Vulnerabilities
CVE-2022-22984 Vulnerability in npm package snyk-docker-plugin
CVE-2017-3156 Vulnerability in maven package org.apache.cxf:cxf-rt-rs-security-oauth2
CVE-2022-45470 Vulnerability in maven package org.apache.hama:hama-core
CVE-2023-33201 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2020-2186 Vulnerability in maven package org.jenkins-ci.plugins:ec2