Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

CVE-2014-0248 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2014-0248

CVE-2014-0248

UNKNOWN

org

Published Jul 7, 2014

Modified 1 years ago

Details

org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.

References

http://rhn.redhat.com/errata/RHSA-2014-0785.html

http://rhn.redhat.com/errata/RHSA-2014-0791.html

http://rhn.redhat.com/errata/RHSA-2014-0792.html

http://rhn.redhat.com/errata/RHSA-2014-0793.html

http://rhn.redhat.com/errata/RHSA-2014-0794.html

http://rhn.redhat.com/errata/RHSA-2015-1888.html

http://secunia.com/advisories/59346

http://secunia.com/advisories/59554

http://secunia.com/advisories/59555

http://www.securitytracker.com/id/1030457

https://www.cve.org/CVERecord?id=CVE-2014-0248

CVSS Analysis

CVSS v2.0

6.8

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

PartialI:P

Availability

PartialA:P

6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P

Ecosystems

Timeline

PublishedJul 7, 2014

ModifiedAug 6, 2024