Lucene search

AttackerKBAKB:36AC1A11-2295-48AC-9DD6-75C10443D5FC

HistoryJun 13, 2012 - 12:00 a.m.

CVE-2012-3347

2012-06-1300:00:00

attackerkb.com

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.003

Percentile

68.6%

JSON

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828.

Recent assessments:

Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0

References

secunia.com/advisories/49335

www.kb.cert.org/vuls/id/773035

www.kb.cert.org/vuls/id/MAPG-8RQL83

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3347

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.003

Percentile

68.6%

JSON

Related for AKB:36AC1A11-2295-48AC-9DD6-75C10443D5FC