NVD

Id
46606  
Name
CVE-2012-5478  
Description
The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2013-02-05  
Modified Date
2015-01-17  
Seq
2012-5478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233383 46606 CVE-2012-5478 RHSA-2013:0191  View
233384 46606 CVE-2012-5478 RHSA-2013:0192  View
233385 46606 CVE-2012-5478 RHSA-2013:0193  View
233386 46606 CVE-2012-5478 RHSA-2013:0194  View
233387 46606 CVE-2012-5478 RHSA-2013:0195  View
233388 46606 CVE-2012-5478 RHSA-2013:0196  View
233389 46606 CVE-2012-5478 RHSA-2013:0197  View
233390 46606 CVE-2012-5478 RHSA-2013:0198  View
233391 46606 CVE-2012-5478 RHSA-2013:0221  View
233392 46606 CVE-2012-5478 RHSA-2013:0533  View
233393 46606 CVE-2012-5478 1028042  View
233394 46606 CVE-2012-5478 jboss-eap-jmx-sec-bypass(81514)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19853 JVNDB-2013-001428 複数の JBoss Enterprise 製品におけるロールによる制限を回避される脆弱性 複数の JBoss Enterprise 製品の AuthorizationInterceptor は、アクセスを適切に制限しないため、ロールによる制限を回避され、任意の JMX 操作を実行される脆弱性が存在します。 CVE-2012-5478 58716 CVE-2012-5478 46606 4.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001428.html 2013-01-24 2013-02-07 View