Executive brief
Red Hat Enterprise Application Platform (EAP) is an enterprise Java application server used to host business-critical applications. A flaw in its IIOP (Inter-ORB Protocol) implementation allows attackers to bypass authentication on the NameService, enabling them to intercept and redirect JNDI lookups to malicious servers, potentially causing man-in-the-middle attacks or denial of service on dependent applications.
Technical details
The vulnerability is an authentication bypass in EAP's IIOP listener NameService component. The NameService accepts bind operations without requiring authentication, allowing an unauthenticated attacker with network access to hijack JNDI (Java Naming and Directory Interface) lookups by binding them to a malicious Object Request Broker (ORB). This enables both man-in-the-middle attacks on application invocations and denial-of-service conditions. The attack requires network access to the IIOP listener but no user interaction or prior authentication.
Affected products
- Red Hat Enterprise Application Platform <UNKNOWN>
Timeline
- 2026-08-11: disclosed