Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-3428
HistoryDec 20, 2012 - 12:02 p.m.

CVE-2012-3428

2012-12-2012:02:17
CWE-255
[email protected]
web.nvd.nist.gov
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.008

Percentile

81.4%

JSON

The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getConnection function call, which allows remote attackers to obtain access to an arbitrary datasource connection in opportunistic circumstances via an invalid connection attempt.

Affected configurations

Nvd
Node
jbossironjacamarRange≤1.0.11
VendorProductVersionCPE
jbossironjacamar*cpe:2.3:a:jboss:ironjacamar:*:*:*:*:*:*:*:*

Related

osv 1
prion 1
cvelist 1
veracode 5
github 1
cve 1
redhat 3
nessus 2
osv
osv
User confusion in IronJacamar
2022-05-17 05:17:01
prion
prion
Design/Logic Flaw
2012-12-20 12:02:00
cvelist
cvelist
CVE-2012-3428
2012-12-20 11:00:00
veracode
veracode
Authorization Bypass
2018-11-07 08:01:08
Access Restriction Bypass
2019-05-02 04:43:22
Access Restriction Bypass
2019-05-02 04:43:29
github
github
User confusion in IronJacamar
2022-05-17 05:17:01
cve
cve
CVE-2012-3428
2012-12-20 12:02:17
redhat
redhat
(RHSA-2012:1592) Important: JBoss Enterprise Application Platform 6.0.1 update
2012-12-18 00:00:00
(RHSA-2012:1591) Important: JBoss Enterprise Application Platform 6.0.1 update
2012-12-18 00:00:00
(RHSA-2012:1594) Important: JBoss Enterprise Application Platform 6.0.1 update
2012-12-18 00:00:00
nessus
nessus
RHEL 6 : JBoss EAP (RHSA-2012:1592)
2013-01-24 00:00:00
RHEL 5 : JBoss EAP (RHSA-2012:1591)
2013-01-24 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.008

Percentile

81.4%

JSON
Related for NVD:CVE-2012-3428
osv1prion1cvelist1veracode5github1cve1redhat3nessus2