CVE-2012-4572
lowPriorität · verfolgen · 15EPSS 0.003 · 27. PerzentilEUUSEPSS · bewertet 2026-10-28
Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications' authorization decisions via a crafted application.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (22)
Betroffene Produkte und Versionsbereiche.
- redhat jboss enterprise application platform≤ 6.0.1nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 4.2.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 4.3.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.0.1nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.1.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.1.1nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.1.2nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.2.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.2.1nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.2.2nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 6.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform≤ 6.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 4.3.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.0.1nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.1.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.1.1nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.2.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (11)
Externe Belege — Patches, Meldungen, Analysen.
- http://rhn.redhat.com/errata/RHSA-2013-0833.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2013-0834.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1437.htmlcnnvd
- http://secunia.com/advisories/53458cnnvd
- http://www.securityfocus.com/bid/60045cnnvd
- http://rhn.redhat.com/errata/RHSA-2013-0833.htmlenisa_euvd
- http://rhn.redhat.com/errata/RHSA-2013-0834.htmlenisa_euvd
- http://rhn.redhat.com/errata/RHSA-2013-1437.htmlenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan