CVE-2012-3369 - CERT CVE

  1. CVE-2012-3369

ID CVE-2012-3369
Sažetak The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.
Reference
CVSS
Base: 4.0
Impact: 4.9
Exploitability:4.9
Pristup
VektorSloženostAutentikacija
NETWORK HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL NONE
CVSS vektor AV:N/AC:H/Au:N/C:P/I:P/A:N
Zadnje važnije ažuriranje 29-08-2017 - 01:31
Objavljeno 05-02-2013 - 23:55