Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
PicketLink: PicketLink IDP ignores role based authorization
cpe:/a:redhat:jboss_enterprise_application_platform:6.4