CVE-2014-0093

Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be granted the java.security.AllPermission permission and allows remote attackers to bypass intended access restrictions.

• CWE-264

• http://rhn.redhat.com/errata/RHSA-2014-0343.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0344.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0345.htmlVendor Advisory
• http://secunia.com/advisories/57675Vendor Advisory
• http://www.securityfocus.com/bid/66596
• http://rhn.redhat.com/errata/RHSA-2014-0343.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0344.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0345.htmlVendor Advisory
• http://secunia.com/advisories/57675Vendor Advisory
• http://www.securityfocus.com/bid/66596

Published

Apr 3, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0087The check_privileges method in vmdb/app/controllers/applicat…
• CVE-2014-0088The SPDY implementation in the ngx_http_spdy_module module i…
• CVE-2014-0089Cross-site scripting (XSS) vulnerability in app/views/common…
• CVE-2014-0090Session fixation vulnerability in Foreman before 1.4.2 allow…
• CVE-2014-0091Foreman has improper input validation which could lead to pa…5.3
• CVE-2014-0092lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3…
• CVE-2014-0094The ParametersInterceptor in Apache Struts before 2.3.16.2 a…
• CVE-2014-0095java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apac…
• CVE-2014-0096java/org/apache/catalina/servlets/DefaultServlet.java in the…
• CVE-2014-0097The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.…
• CVE-2014-0098The log_cookie function in mod_log_config.c in the mod_log_c…
• CVE-2014-0099Integer overflow in java/org/apache/tomcat/util/buf/Ascii.ja…