CVE:CVE-2012-2377
CNNVD:CNNVD-201207-629
Red Hat JBoss Enterprise Application Platform（EAP）是美国红帽（Red Hat）公司的一套开源、基于J2EE的中间件平台。该平台主要用于构建、部署和托管Java应用程序与服务。JBoss Enterprise BRMS Platform是美国红帽（RED HAT）公司的一套开源的业务规则和BPM平台。
JBoss Enterprise Portal Platform 5.2.2之前的版本，SOA Platform before 5.3.0之前的版本，BRMS Platform 5.3.0之前的版本中的JGroups诊断服务中存在漏洞。该漏洞源于启用JGroup通道时，JGroups诊断服务在未经过验证的情况下会被默认启动。在临近的网络中的远程攻击者可利用该漏洞通过特制的IP多组播报读取诊断信息。
solution:Upgrade redhat jboss_enterprise_portal_platform to a higher version than 5.2.1,4.3.0,4.3.0:cp07,5.0.0,5.0.1,5.1.0,5.1.1,5.2.0,and avoid the version (,5.2.1],4.3.0,4.3.0:cp07,5.0.0,5.0.1,5.1.0,5.1.1,5.2.0; Upgrade redhat jboss_enterprise_soa_platform to a higher version than 5.2.0,4.2.0,4.2.0:cp01,4.2.0:cp02,4.2.0:cp03,4.2.0:cp04,4.2.0:cp05,4.2.0:tp02,4.3.0,4.3.0:cp01,4.3.0:cp02,4.3.0:cp03,4.3.0:cp04,4.3.0:cp05,5.0.0,5.0.1,5.0.2,5.1.0,5.1.1,and avoid the version (,5.2.0],4.2.0,4.2.0:cp01,4.2.0:cp02,4.2.0:cp03,4.2.0:cp04,4.2.0:cp05,4.2.0:tp02,4.3.0,4.3.0:cp01,4.3.0:cp02,4.3.0:cp03,4.3.0:cp04,4.3.0:cp05,5.0.0,5.0.1,5.0.2,5.1.0,5.1.1; Upgrade redhat jboss_enterprise_brms_platform to a higher version than 5.2.0,and avoid the version (,5.2.0]