VULNERABILITY INTELLIGENCE

CVE-2011-4573

CVSS score3.5 LOW
EPSS probability0.81%
CISA KEVNot currently listed
Published2014-04-01
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N

Description

Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.

Primary references