CVEvulnerability

CVE-2012-1154

4.3 MEDIUM Published 2012-10-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-10-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-264

Description

mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote attackers to bypass access restrictions and gain access to applications deployed on the root context via unspecified vectors.

Affected configurations

• redhat jboss enterprise application platform 5.1.2 • redhat mod cluster 1.0.10 • redhat mod cluster 1.1.0 • redhat mod cluster 1.1.1 • redhat mod cluster 1.1.2 • redhat mod cluster 1.1.3 • redhat mod cluster 1.1.4

Related

Weakness · not in database (1)

References