Authentication flaw

2012-10-2223:55:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.5%

JSON

mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when “ROOT” is set to excludedContexts, exposes the root context of the server, which allows remote attackers to bypass access restrictions and gain access to applications deployed on the root context via unspecified vectors.

CPENameOperatorVersion
jboss_enterprise_application_platformeq5.1.2
mod_clustereq1.1.0
mod_clustereq1.0.10
mod_clustereq1.1.4
mod_clustereq1.1.3
mod_clustereq1.1.2
mod_clustereq1.1.1

Name	Operator	Version
jboss_enterprise_application_platform	eq	5.1.2
mod_cluster	eq	1.1.0
mod_cluster	eq	1.0.10
mod_cluster	eq	1.1.4
mod_cluster	eq	1.1.3
mod_cluster	eq	1.1.2
mod_cluster	eq	1.1.1