title: Red Hat Security Advisory: jbossas-web and jboss-naming security update
description: JNDI: unauthenticated remote write access is permitted by default JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm
cpes: cpe:/a:redhat:jboss_enterprise_web_platform:5::el4 cpe:/a:redhat:jboss_enterprise_web_platform:5::el5 cpe:/a:redhat:jboss_enterprise_web_platform:5::el6