NVD

Id
44966  
Name
CVE-2012-3369  
Description
The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user"s password to be used.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2013-02-05  
Modified Date
2015-01-17  
Seq
2012-3369  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225299 44966 CVE-2012-3369 RHSA-2013:0191  View
225300 44966 CVE-2012-3369 RHSA-2013:0192  View
225301 44966 CVE-2012-3369 RHSA-2013:0193  View
225302 44966 CVE-2012-3369 RHSA-2013:0194  View
225303 44966 CVE-2012-3369 RHSA-2013:0195  View
225304 44966 CVE-2012-3369 RHSA-2013:0196  View
225305 44966 CVE-2012-3369 RHSA-2013:0197  View
225306 44966 CVE-2012-3369 RHSA-2013:0198  View
225307 44966 CVE-2012-3369 RHSA-2013:0221  View
225308 44966 CVE-2012-3369 RHSA-2013:0533  View
225309 44966 CVE-2012-3369 1028042  View
225310 44966 CVE-2012-3369 57547  View
225311 44966 CVE-2012-3369 jboss-eap-session-hijacking(81512)  View
225312 44966 CVE-2012-3369 https://bugzilla.redhat.com/show_bug.cgi?id=836451  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19851 JVNDB-2013-001426 複数の JBoss Enterprise 製品における権限を取得される脆弱性 複数の JBoss Enterprise 製品の CallerIdentityLoginModule には、権限を取得される脆弱性が存在します。 CVE-2012-3369 56607 CVE-2012-3369 44966 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001426.html 2013-01-24 2013-02-07 View