Логотип exploitDog
bind:CVE-2012-5478
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2012-5478

Количество 4

Количество 4

redhat логотип

CVE-2012-5478

около 13 лет назад

The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.

CVSS2: 4.9
EPSS: Низкий
nvd логотип

CVE-2012-5478

около 13 лет назад

The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.

CVSS2: 4.9
EPSS: Низкий
debian логотип

CVE-2012-5478

около 13 лет назад

The AuthorizationInterceptor in JBoss Enterprise Application Platform ...

CVSS2: 4.9
EPSS: Низкий
github логотип

GHSA-w372-6384-f8p5

больше 3 лет назад

The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2012-5478

The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.

CVSS2: 4.9
1%
Низкий
около 13 лет назад
nvd логотип
CVE-2012-5478

The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.

CVSS2: 4.9
1%
Низкий
около 13 лет назад
debian логотип
CVE-2012-5478

The AuthorizationInterceptor in JBoss Enterprise Application Platform ...

CVSS2: 4.9
1%
Низкий
около 13 лет назад
github логотип
GHSA-w372-6384-f8p5

The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.

1%
Низкий
больше 3 лет назад

Уязвимостей на страницу