4.6

CVE-2012-1167

EPSS 0.82%
Veröffentlicht 23.11.2012 20:55:02
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the server is configured to use the JaccAuthorizationRealm and the ignoreBaseDecision property is set to true on the JBossWebRealm, does not properly check the permissions created by the WebPermissionMapping class, which allows remote authenticated users to access arbitrary applications.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 17

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Jboss Enterprise Application Platform Version5.1.0

Redhat ≫ Jboss Enterprise Application Platform Version5.1.1

Redhat ≫ Jboss Enterprise Application Platform Version5.2.0

Redhat ≫ Jboss Enterprise Application Platform Version5.2.1

Redhat ≫ Jboss Enterprise Brms Platform Version <= 5.2.0

Redhat ≫ Jboss Enterprise Soa Platform Version <= 5.2.0

Redhat ≫ Jboss Enterprise Soa Platform Version5.0.0

Redhat ≫ Jboss Enterprise Soa Platform Version5.0.1

Redhat ≫ Jboss Enterprise Soa Platform Version5.0.2

Redhat ≫ Jboss Enterprise Soa Platform Version5.1.0

Redhat ≫ Jboss Enterprise Soa Platform Version5.1.1

Redhat ≫ Jboss Enterprise Web Platform Version <= 5.1.1

Redhat ≫ Jboss Enterprise Web Platform Version5.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.82%	0.721

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.6	3.9	6.4	AV:N/AC:H/Au:S/C:P/I:P/A:P

http://rhn.redhat.com/errata/RHSA-2012-1232.html

Vendor Advisory

http://secunia.com/advisories/50549

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2012-1028.html

http://rhn.redhat.com/errata/RHSA-2012-1026.html

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2012-1027.html

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2012-1125.html

Vendor Advisory

http://secunia.com/advisories/49658

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2012-1013.html

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2012-1014.html

Vendor Advisory

http://secunia.com/advisories/49635

Vendor Advisory

http://securitytracker.com/id?1027501

http://www.securityfocus.com/bid/54089

https://bugzilla.redhat.com/show_bug.cgi?id=802622

https://exchange.xforce.ibmcloud.com/vulnerabilities/76680

https://nvd.nist.gov/vuln/detail/CVE-2012-1167

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-1167

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-1167

EUVD