CVE-2012-5626

Published: Jan 23, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation.

Affected (9)

Products: Redhat: Jboss Brms, Jboss Enterprise Application Platform, Jboss Enterprise Web Server, Jboss Operations Network, Jboss Portal, Jboss Soa Platform

Redhat

6 products

Jboss Brms

Jboss Enterprise Application Platform

Jboss Enterprise Web Server

Jboss Operations Network

Jboss Portal

Jboss Soa Platform

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Brms	Version 5
Redhat Jboss Enterprise Application Platform	Version 5.0.0
Redhat Jboss Enterprise Web Server	Version 1.0.0
Redhat Jboss Operations Network	Version 3.1
Redhat Jboss Portal	Version 4.0.0
Redhat Jboss Portal	Version 5.0.0
Redhat Jboss Soa Platform	Version 4.2
Redhat Jboss Soa Platform	Version 4.3
Redhat Jboss Soa Platform	Version 5

References (4)

https://access.redhat.com/security/cve/cve-2012-5626

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5626

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://access.redhat.com/security/cve/cve-2012-5626

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5626

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.