Total vulnerabilities in the database
admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files consuming enough resources that normal server functioning could be impaired.
| Software | From | Fixed in |
|---|---|---|
| redhat / jboss_enterprise_application_platform | 7.1.0 | 7.1.0.x |
| redhat / jboss_enterprise_application_platform | 6.4.0 | 6.4.0.x |
| redhat / jboss_enterprise_application_platform | 7.0.0 | 7.0.0.x |