CVE-2012-3347

Опубликовано: 13 июн. 2012

Источник: nvd

CVSS2: 6

EPSS Низкий

Описание

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828.

Ссылки

http://secunia.com/advisories/49335
http://www.kb.cert.org/vuls/id/773035
US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8RQL83
US Government Resource
http://secunia.com/advisories/49335
http://www.kb.cert.org/vuls/id/773035
US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8RQL83
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:efstechnology:autoform_pdm_archive:*:*:*:*:*:*:*:*

Версия до 6.920 (включая)

cpe:2.3:a:efstechnology:autoform_pdm_archive:6.9:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00762

Низкий

6 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-c8cc-954v-xv37

github

больше 3 лет назад