Unrated severityNVD Advisory· Published Apr 1, 2014· Updated May 6, 2026
CVE-2011-4573
CVE-2011-4573
Description
Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.
Affected products
9cpe:2.3:a:redhat:jboss_operations_network:*:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:redhat:jboss_operations_network:*:*:*:*:*:*:*:*range: <=2.4.1
- cpe:2.3:a:redhat:jboss_operations_network:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_operations_network:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_operations_network:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_operations_network:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_operations_network:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_operations_network:2.3:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_operations_network:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_operations_network:2.4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- rhn.redhat.com/errata/RHSA-2012-0089.htmlnvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.