Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2012-3369
HistoryFeb 05, 2013 - 11:11 p.m.

CVE-2012-3369

2013-02-0523:11:00
redhat
www.cve.org

5.9 Medium

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.8%

JSON

The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user’s password to be used.

Related

prion 1
cve 1
nvd 1
redhat 8
veracode 8
nessus 6
prion
prion
Design/Logic Flaw
2013-02-05 23:55:00
cve
cve
CVE-2012-3369
2013-02-05 23:55:01
nvd
nvd
CVE-2012-3369
2013-02-05 23:55:01
redhat
redhat
(RHSA-2013:0533) Important: JBoss Enterprise SOA Platform 5.3.1 update
2013-02-20 00:00:00
(RHSA-2013:0221) Important: JBoss Enterprise BRMS Platform 5.3.1 update
2013-01-31 00:00:00
(RHSA-2013:0194) Important: JBoss Enterprise Application Platform 5.2.0 update
2013-01-24 00:00:00
veracode
veracode
Privilege Escalation
2019-05-02 04:46:55
Weak Authentication
2019-05-02 04:46:21
Information Disclosure
2019-05-02 04:46:19
nessus
nessus
RHEL 5 : JBoss EAP (RHSA-2013:0192)
2013-01-24 00:00:00
RHEL 6 : JBoss EAP (RHSA-2013:0191)
2013-01-24 00:00:00
RHEL 6 : JBoss EWP (RHSA-2013:0195)
2014-11-08 00:00:00

5.9 Medium

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.8%

JSON
Related for CVELIST:CVE-2012-3369
prion1cve1nvd1redhat8veracode8nessus6