CVE:CVE-2010-2493
CNNVD:CNNVD-201008-083
JBoss Enterprise SOA Platform 5.0.2之前的版本中的(1)security_saml快启动，(2)webservice_proxy_security快启动，(3)web-console 应用程序，(4)http-invoker应用程序，(5) gpd-deployer应用程序，(6)jbpm-console应用程序，(7)contract 应用程序，和(8)uddi-console应用程序中的picketlink-sts.war的部署描述的默认配置(又名web.xml)包含GET和POST http-method元素，远程攻击者可以借助特制的HTTP请求绕过访问限制。
solution:Upgrade redhat jboss_enterprise_soa_platform to a higher version than 5.0.1,4.2.0,4.2.0:cp01,4.2.0:cp02,4.2.0:cp03,4.2.0:cp04,4.2.0:cp05,4.2.0:tp02,4.3.0,4.3.0:cp01,4.3.0:cp02,4.3.0:cp03,4.3.0:cp04,5.0.0,and avoid the version (,5.0.1],4.2.0,4.2.0:cp01,4.2.0:cp02,4.2.0:cp03,4.2.0:cp04,4.2.0:cp05,4.2.0:tp02,4.3.0,4.3.0:cp01,4.3.0:cp02,4.3.0:cp03,4.3.0:cp04,5.0.0