CVE-2012-5629

The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and…

published March 12, 2013

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote attackers to bypass authentication via an empty password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02344 · 83.4th percentile
Published
2013-03-12T22:00Z
EPSS history
Timeline
  • 12 MAR 22:00Z
    The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and…
    cvelistv5