CVE-2012-3369

The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA…

published February 5, 2013

CVSS
—
EPSS
3%
Percentile
85.6
In the wild
Unconfirmed
What it is

The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02685 · 85.6th percentile
Published
2013-02-05T23:11Z
EPSS history
Timeline
  • 05 FEB 23:11Z
    The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA…
    cvelistv5