CVEs-PoC/2014/CVE-2014-0018.md

CVE-2014-0018

Description

Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container (MSC) service registry, which allows local users to modify the server via a crafted deployment.

POC

Reference

No PoCs from references.

Github

• https://github.com/MrE-Fog/dagda
• https://github.com/auditt7708/rhsecapi
• https://github.com/bharatsunny/dagda
• https://github.com/eliasgranderubio/dagda
• https://github.com/man151098/dagda