CVE-2006-3733

jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name.

Affected products

Jboss

Cisco Security Monitoring Analysis And Response System

= 4.2.0

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

12.0% (96th percentile)

Weakness

CWE-264

NVD status

Modified

Published

2006-07-19