Ubuntu.comUB:CVE-2012-4572CVE-2012-4572
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss
Portal before 6.1.0 does not load the implementation of a custom
authorization module for a new application when an implementation is
already loaded and the modules share class names, which allows local users
to control certain applications’ authorization decisions via a crafted
application.
Notes
| Author | Note |
|---|---|
| ebarretto | only builds a few libraries, not the full application server |
Related
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%