An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains the security context from the process last used, which lets a local user obtain elevated privileges.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jboss_application_server | Redhat | 7.1.0 (including) | 7.1.0 (including) |
| Jboss_application_server | Redhat | 7.1.1 (including) | 7.1.1 (including) |
| Jboss_enterprise_application_platform | Redhat | 6.0.0-beta (including) | 6.0.0-beta (including) |