CVE-2012-4550CWE-280

Jboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass

Medium · published January 5, 2013

CVSS v3.1
5.3
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

A flaw was found in JBoss Enterprise Application Platform. When role-based authorization is used for Enterprise Java Beans (EJB) access, the system does not correctly call the necessary authorization modules. This prevents Java Authorization Contract for Containers (JACC) permissions from being applied, allowing remote attackers to gain unauthorized access to EJBs.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02102 · 81.5th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2013-01-05T00:00Z
EPSS history
Timeline
  • 05 JAN 00:00Z
    Jboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass
    cvelistv5