CVE

Id
58872  
CVE No.
CVE-2012-5629  
Status
Candidate  
Description
The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote attackers to bypass authentication via an empty password.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments