CVE-2007-1354 describes a race condition vulnerability in the JMX Console's Access Control functionality (JMXOpsAccessControlFilter) within JBoss Application Server versions 4.0.2 and 4.0.5 prior to 20070416. An authenticated administrator can exploit this by logging in during a more privileged administrator's session, leading to privilege escalation from Read Mode to Write Mode. The vulnerability has a CVSS score of 6.0, indicating a medium severity with network access, medium attack complexity, and partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage for this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
4.0.2.ga_cp02CPE matchmatch criteria | cpe:2.3:a:jboss:jboss_application_server:4.0.2.ga_cp02:*:*:*:*:*:*:* | ||
4.0.2.ga_cp03CPE matchmatch criteria | cpe:2.3:a:jboss:jboss_application_server:4.0.2.ga_cp03:*:*:*:*:*:*:* | ||
4.0.2.ga_cp04CPE matchmatch criteria | cpe:2.3:a:jboss:jboss_application_server:4.0.2.ga_cp04:*:*:*:*:*:*:* | ||
4.0.5.gaCPE matchmatch criteria | cpe:2.3:a:jboss:jboss_application_server:4.0.5.ga:*:*:*:*:*:*:* | ||
4.0.5_cp01CPE matchmatch criteria | cpe:2.3:a:jboss:jboss_application_server:4.0.5_cp01:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:S/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.