CVE-2014-3464

CVE-2014-3464 describes a vulnerability in Red Hat JBossWS, specifically affecting JBoss EAP versions 6.2.0 and 6.3.0. It allows remote authenticated users to bypass method-level restrictions for outbound messages, gaining unauthorized access to JAX-WS handlers by leveraging existing permissions to the EJB class. With a CVSS score of 5.5 (medium severity), this vulnerability has a low attack complexity and requires authentication, potentially leading to partial confidentiality and integrity compromise. There is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low current threat level.