CVE-2011-4085

CVE-2011-4085 is a bypass authentication vulnerability affecting JBoss Enterprise Application Platform, SOA Platform, BRMS Platform, and Portal Platform versions prior to their respective patches. The vulnerability stems from the httpha-invoker servlets only enforcing access control for GET and POST methods, allowing remote attackers to bypass authentication using other HTTP methods. With a CVSS score of 6.8, this medium-severity vulnerability allows for partial confidentiality, integrity, and availability impact with medium attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.