The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2539 advisory.

  - JBoss EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server     (CVE-2015-5304)

  - apache-commons-collections: InvokerTransformer code execution during deserialisation (CVE-2015-7501)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : Red Hat JBoss Enterprise Application Platform 6.4.5 update (Critical) (RHSA-2015:2539)

critical Nessus Plugin ID 87193

Version 2.21