Description
Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be granted the java.security.AllPermission permission and allows remote attackers to bypass intended access restrictions.
Remediation
References
Related Vulnerabilities
WordPress Plugin SocialFit 'msg' Parameter Cross-Site Scripting (1.2.2)
Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2011-4907)
MySQL CVE-2020-14827 Vulnerability (CVE-2020-14827)
Joomla CVE-2023-40626 Vulnerability (CVE-2023-40626)
WordPress Plugin All-in-One WP Migration Multiple Cross-Site Request Forgery Vulnerabilities (7.1)