CVE-2011-4085: Red Hat JBoss Application Server Improper Authentication
Vulnerability summary
CVE-2011-4085 is a medium (CVSS 6.8) Improper Authentication vulnerability in Red Hat JBoss Application Server. It is known to be exploited: ENISA lists it, first on 14-07-2025. EPSS estimates a 2.94% chance of exploitation in the next 30 days, higher than 86.9% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 23-11-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
- 14-07-2025Added to ENISA KEVAdded to the ENISA known exploited vulnerabilities catalog.
Description
The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.94%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.94% on 18-09-2026
Known exploited
Compare KEV catalogs
ENISA CNWListed- Added
- 14-07-2025
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat4 products
- jboss_enterprise_application_platform≤ 5.1.1 | 4.2.0 | 4.3.0 | 5.0.0 | 5.0.1 | 5.1.0
- jboss_enterprise_brms_platform≤ 5.2.0
- jboss_enterprise_portal_platform≤ 4.3.0
- jboss_enterprise_soa_platform≤ 5.1.1 | 4.2.0 | 4.2.0:cp01 | 4.2.0:cp02 | 4.2.0:cp03 | 4.2.0:cp04 | 4.2.0:cp05 | 4.2.0:tp02 | 4.3.0 | 4.3.0:cp01 | 4.3.0:cp02 | 4.3.0:cp03 | 4.3.0:cp04 | 4.3.0:cp05 | 5.0.0 | 5.0.1 | 5.0.2 | 5.1.0
1 vendor · 4 products
References
11 links- bugzilla.redhat.com/show_bug.cgi?id=750422X Refsource MISC