title: Red Hat Security Advisory: JBoss Enterprise BRMS Platform 5.3.0 update
description: Invoker servlets authentication bypass (HTTP verb tampering) JNDI: unauthenticated remote write access is permitted by default JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started
cpes: cpe:/a:redhat:jboss_enterprise_brms_platform:5.3