CVE-2011-2908

Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitrary code via unspecified vectors.

• CWE-352

• http://rhn.redhat.com/errata/RHSA-2012-1152.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1165.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1232.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0191.html
• http://rhn.redhat.com/errata/RHSA-2013-0192.html
• http://rhn.redhat.com/errata/RHSA-2013-0193.html
• http://rhn.redhat.com/errata/RHSA-2013-0194.html
• http://rhn.redhat.com/errata/RHSA-2013-0195.html
• http://rhn.redhat.com/errata/RHSA-2013-0196.html
• http://rhn.redhat.com/errata/RHSA-2013-0197.html
• http://rhn.redhat.com/errata/RHSA-2013-0198.html
• http://secunia.com/advisories/50230Vendor Advisory
• http://secunia.com/advisories/50549Vendor Advisory
• http://secunia.com/advisories/51984
• http://www.osvdb.org/84530
• http://www.securityfocus.com/bid/54915
• https://bugzilla.redhat.com/show_bug.cgi?id=730176
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77549
• http://rhn.redhat.com/errata/RHSA-2012-1152.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1165.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1232.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0191.html
• http://rhn.redhat.com/errata/RHSA-2013-0192.html
• http://rhn.redhat.com/errata/RHSA-2013-0193.html
• http://rhn.redhat.com/errata/RHSA-2013-0194.html
• http://rhn.redhat.com/errata/RHSA-2013-0195.html
• http://rhn.redhat.com/errata/RHSA-2013-0196.html
• http://rhn.redhat.com/errata/RHSA-2013-0197.html
• http://rhn.redhat.com/errata/RHSA-2013-0198.html
• http://secunia.com/advisories/50230Vendor Advisory
• http://secunia.com/advisories/50549Vendor Advisory
• http://secunia.com/advisories/51984
• http://www.osvdb.org/84530
• http://www.securityfocus.com/bid/54915
• https://bugzilla.redhat.com/show_bug.cgi?id=730176
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77549

Published

Nov 23, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2902zxpdf in xpdf before 3.02-19 as packaged in Debian unstable …
• CVE-2011-2903Heap-based buffer overflow in tcptrack before 1.4.2 might al…
• CVE-2011-2904Cross-site scripting (XSS) vulnerability in acknow.php in Za…
• CVE-2011-2905Untrusted search path vulnerability in the perf_config funct…
• CVE-2011-2906Integer signedness error in the pmcraid_ioctl_passthrough fu…5.5
• CVE-2011-2907Terascale Open-Source Resource and Queue Manager (aka TORQUE…
• CVE-2011-2909The do_devinfo_ioctl function in drivers/staging/comedi/come…
• CVE-2011-2910The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does …6.7
• CVE-2011-2911Integer overflow in the CSoundFile::ReadWav function in src/…
• CVE-2011-2912Stack-based buffer overflow in the CSoundFile::ReadS3M funct…
• CVE-2011-2913Off-by-one error in the CSoundFile::ReadAMS function in src/…
• CVE-2011-2914Off-by-one error in the CSoundFile::ReadDSM function in src/…