CVE-2012-3428

The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does…

published December 20, 2012

CVSS
—
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getConnection function call, which allows remote attackers to obtain access to an arbitrary datasource connection in opportunistic circumstances via an invalid connection attempt.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01410 · 72.3th percentile
Published
2012-12-20T11:00Z
EPSS history
Timeline
  • 20 DEC 11:00Z
    The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does…
    cvelistv5