title: Red Hat Security Advisory: jbosssx security update
description: JBoss: allows empty password to authenticate against LDAP
cpes: cpe:/a:redhat:jboss_enterprise_brms_platform:5.3.1 cpe:/a:redhat:jboss_enterprise_portal_platform:4.3.0:update7 cpe:/a:redhat:jboss_enterprise_portal_platform:5.2.2 cpe:/a:redhat:jboss_enterprise_soa_platform:4.2.0:update5 cpe:/a:redhat:jboss_enterprise_soa_platform:4.3.0:update5 cpe:/a:redhat:jboss_enterprise_soa_platform:5.3.1