NVD

Id
44189  
Name
CVE-2012-2377  
Description
JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-11-23  
Modified Date
2013-02-06  
Seq
2012-2377  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221925 44189 CVE-2012-2377 RHSA-2012:1028  View
221926 44189 CVE-2012-2377 RHSA-2012:1125  View
221927 44189 CVE-2012-2377 RHSA-2012:1232  View
221928 44189 CVE-2012-2377 RHSA-2013:0191  View
221929 44189 CVE-2012-2377 RHSA-2013:0192  View
221930 44189 CVE-2012-2377 RHSA-2013:0193  View
221931 44189 CVE-2012-2377 RHSA-2013:0194  View
221932 44189 CVE-2012-2377 RHSA-2013:0195  View
221933 44189 CVE-2012-2377 RHSA-2013:0196  View
221934 44189 CVE-2012-2377 RHSA-2013:0197  View
221935 44189 CVE-2012-2377 RHSA-2013:0198  View
221936 44189 CVE-2012-2377 54183  View
221937 44189 CVE-2012-2377 jboss-jgroups-info-disc(76540)  View
221938 44189 CVE-2012-2377 https://bugzilla.redhat.com/show_bug.cgi?id=823392  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29839 JVNDB-2012-005546 複数の JBoss Enterprise 製品の JGroups 診断サービスにおける診断情報を読まれる脆弱性 JBoss Enterprise Portal Platform、SOA Platform、および BRMS Platform の JGroups 診断サービス (JGroups diagnostics service) は、JGroups チャネルにより開始される際、認証なしで有効化されるため、診断情報を読まれる脆弱性が存在します。 CVE-2012-2377 55615 CVE-2012-2377 44189 3.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005546.html 2012-06-22 2012-11-27 View