Vulnerability Description
Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Jboss Operations Network | <= 2.4.1 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2012-0396.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0406.htmlVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=799789
- http://rhn.redhat.com/errata/RHSA-2012-0396.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0406.htmlVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=799789
FAQ
What is CVE-2012-1100?
CVE-2012-1100 is a vulnerability with a CVSS score of 5.8 (MEDIUM). Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login t...
How severe is CVE-2012-1100?
CVE-2012-1100 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-1100?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Jboss Operations Network.