title: Red Hat Security Advisory: JBoss Enterprise Portal Platform 5.2.2 update
description: JDK: XML parsing Denial-Of-Service (6845701) CSRF on jmx-console allows invocation of operations on mbeans JNDI: unauthenticated remote write access is permitted by default jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started
cpes: cpe:/a:redhat:jboss_enterprise_portal_platform:5.2