CVE-2014-3518
Last modified
CVE-2014-3518 is a vulnerability of currently unknown severity. jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA Platform 5.3.1, does not properly implement the JSR 160 specification, which allows remote attackers to execute arbitrary code via unspecified vectors.. EPSS estimates a 2.61% chance of exploitation in the next 30 days.
Description
jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA Platform 5.3.1, does not properly implement the JSR 160 specification, which allows remote attackers to execute arbitrary code via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Jboss Enterprise Application Platform | 5.2.0 |
| Redhat | Jboss Enterprise Brms Platform | 5.3.1 |
| Redhat | Jboss Enterprise Portal Platform | 5.2.2 |
| Redhat | Jboss Enterprise Soa Platform | 5.3.1 |
References
- http://rhn.redhat.com/errata/RHSA-2014-0887.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0887.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-3518?
How severe is CVE-2014-3518?
How do I fix CVE-2014-3518?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-3512Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP…
- CVE-2014-3513Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenS…
- CVE-2014-3514activerecord/lib/active_record/relation/query_methods.rb in …
- CVE-2014-3515The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.…
- CVE-2014-3516Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-3517api/metadata/handler.py in OpenStack Compute (Nova) before 2…
- CVE-2014-3519The open_by_handle_at function in vzkernel before 042stab090…
- CVE-2014-3520OpenStack Identity (Keystone) before 2013.2.4, 2014.x before…
- CVE-2014-3521The component in (1) /luci/homebase and (2) /luci/cluster me…
- CVE-2014-3522The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x b…
- CVE-2014-3523Memory leak in the winnt_accept function in server/mpm/winnt…
- CVE-2014-3524Apache OpenOffice before 4.1.1 allows remote attackers to ex…
Are you affected by CVE-2014-3518?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST