CVEvulnerability
CVE-2012-5478
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-02-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.
Affected configurations
• redhat jboss enterprise application platform 5.2.0
• redhat jboss enterprise web platform 5.2.0
• redhat jboss enterprise brms platform (<= 5.3.0)
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2013-0191.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0192.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0193.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0194.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0195.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0196.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0197.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0198.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0221.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0533.html rhn.redhat.com
- http://secunia.com/advisories/51984 Vendor Advisory
- http://secunia.com/advisories/52054 Vendor Advisory
- http://securitytracker.com/id?1028042 securitytracker.com
- http://www.osvdb.org/89580 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81514 exchange.xforce.ibmcloud.com
- http://rhn.redhat.com/errata/RHSA-2013-0191.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0192.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0193.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0194.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0195.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0196.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0197.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0198.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0221.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0533.html rhn.redhat.com
- http://secunia.com/advisories/51984 Vendor Advisory
- http://secunia.com/advisories/52054 Vendor Advisory
- http://securitytracker.com/id?1028042 securitytracker.com
- http://www.osvdb.org/89580 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81514 exchange.xforce.ibmcloud.com