Threats tagged 'ghsa-259j-555g-mwrr'

A vulnerability in the EAP's IIOP listener's NameService allows unauthenticated bind operations. This flaw enables an attacker to hijack JNDI lookups by binding them to a malicious ORB, potentially causing man-in-the-middle (MITM) attacks or denial of service (DoS) on subsequent invocations. The issue affects Red Hat JBoss Enterprise Application Platform 7.4 and has a CVSS score of 7.4 (high severity). A security update is available in Red Hat JBoss Enterprise Application Platform 7.4.25 that addresses this vulnerability.