CVE-2012-3370 in JBoss Enterprise

الملخص

بحسب MITRE

The SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP) 5.2.0, Web Platform (EWP) 5.2.0, and BRMS Platform before 5.3.1 returns the credentials of the previous user when a security context is not provided, which allows remote attackers to gain privileges as other users.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• حجز: 14/06/2012
• إفشاء: 05/02/2013
• الاعتدال: تمت الموافقة
• إدخال: VDB-7499
• CPE: جاهز
• CWE: CWE-264 (مؤكد)
• CVSS: 5.8 (NVD)
• EPSS: 0.01862
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Telecommunication, Pharma, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-3370
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-3370
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-3370/