CVE-2011-2908: Red Hat JBoss Enterprise Brms Platform

Medium severity, CVSS 6.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitrary code via unspecified vectors.

Affected products

• Red Hat JBoss Enterprise Brms Platform: version 5.3.0 only
• Red Hat JBoss Enterprise Portal Platform: up to and including 5.2.1; version 5.0.0 only; version 5.0.1 only; version 5.1.0 only; version 5.1.1 only; version 5.2.0 only
• Red Hat JBoss Enterprise Soa Platform: version 5.3.0 only

Published 2012-11-23. Last modified 2026-06-16.