CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 5.2
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: a missing permission check was found in the cli in jboss operations network before 2.3.1 does not properly check permissions, which allows jboss on users to perform management tasks and configuration changes with the privileges of the administrator user.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-10-30
Last Modified Date: 2019-11-05