CVE-2011-4573: Red Hat JBoss Operations Network

Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.

Affected products

• Red Hat JBoss Operations Network: up to and including 2.4.1; version 1.0.0 only; version 2.0.0 only; version 2.0.1 only; version 2.1.0 only; version 2.2 only; …

Published 2014-04-01. Last modified 2026-06-16.