Red Hat Security Advisory: jbossas-web and jboss-naming security update
JNDI: unauthenticated remote write access is permitted by default JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm
cpe:/a:redhat:jboss_enterprise_web_platform:5::el4 cpe:/a:redhat:jboss_enterprise_web_platform:5::el5 cpe:/a:redhat:jboss_enterprise_web_platform:5::el6