Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : https://vigilance.fr/computer-vulnerability

SYNTHESIS OF THE VULNERABILITY

Impacted products: JBoss EAP by Red Hat, Red Hat SSO.

Severity: 2/4.

Consequences: privileged access/rights, data reading, data
creation/edition.

Provenance: user account.

Confidence: confirmed by the editor (5/5).

Creation date: 13/10/2020.

DESCRIPTION OF THE VULNERABILITY

An attacker can bypass restrictions via Admin-only Mode Reload of
PicketBox, in order to escalate his privileges.

ACCESS TO THE FULL VIGIL@NCE BULLETIN

https://vigilance.fr/vulnerability/PicketBox-privilege-escalation-via-Admin-only-Mode-Reload-33553