CVE:CVE-2010-1429
CNNVD:CNNVD-201004-468
Red Hat JBoss Enterprise Application Platform（EAP）是美国红帽（Red Hat）公司的一套开源的、基于J2EE的中间件平台。该平台主要用于构建、部署和托管Java应用程序与服务。
Red Hat JBoss Enterprise Application Platform 4.2版本至4.2.0.CP09之前版本、4.3版本至4.3.0.CP08之前版本存在权限许可和访问控制问题漏洞。攻击者利用该漏洞可以访问敏感信息。
solution:Upgrade redhat jboss_enterprise_application_platform to a higher version than *:cp08,*:cp07,4.2,4.2.0:cp01,4.2.0:cp02,4.2.0:cp03,4.2.0:cp04,4.2.0:cp05,4.2.0:cp06,4.2.0:cp07,4.3,4.3.0:cp01,4.3.0:cp02,4.3.0:cp03,4.3.0:cp04,4.3.0:cp05,4.3.0:cp06,and avoid the version *:cp08,*:cp07,4.2,4.2.0:cp01,4.2.0:cp02,4.2.0:cp03,4.2.0:cp04,4.2.0:cp05,4.2.0:cp06,4.2.0:cp07,4.3,4.3.0:cp01,4.3.0:cp02,4.3.0:cp03,4.3.0:cp04,4.3.0:cp05,4.3.0:cp06