CVE-2012-5478

NONECVSS 0.0

0.0

The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.

🔗 References (30)

secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0191.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0192.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0193.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0194.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0195.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0196.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0197.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0198.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0221.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0533.html
secalert@redhathttp://secunia.com/advisories/51984
secalert@redhathttp://secunia.com/advisories/52054
secalert@redhathttp://securitytracker.com/id?1028042
secalert@redhathttp://www.osvdb.org/89580
secalert@redhathttps://exchange.xforce.ibmcloud.com/vulnerabilities/81514

Is Your Infrastructure Affected by CVE-2012-5478?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs

CVE-2012-5478

📅 Published

🔄 Last Modified

🔗 References (30)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2012-5478?