CVE-2012-2377 - CERT CVE

  1. CVE-2012-2377

ID CVE-2012-2377
Sažetak JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.
Reference
CVSS
Base: 3.3
Impact: 2.9
Exploitability:6.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE NONE
CVSS vektor AV:A/AC:L/Au:N/C:P/I:N/A:N
Zadnje važnije ažuriranje 29-08-2017 - 01:31
Objavljeno 23-11-2012 - 20:55