CVE-2012-5626 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Redhat	Jboss Brms	5
Redhat	Jboss Enterprise Application Platform	5.0.0
Redhat	Jboss Enterprise Web Server	1.0.0
Redhat	Jboss Operations Network	3.1
Redhat	Jboss Portal	4.0.0
Redhat	Jboss Soa Platform	4.2

References

https://access.redhat.com/security/cve/cve-2012-5626Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5626Issue TrackingVendor Advisory
https://access.redhat.com/security/cve/cve-2012-5626Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5626Issue TrackingVendor Advisory

FAQ

What is CVE-2012-5626?

CVE-2012-5626 is a vulnerability with a CVSS score of 7.5 (HIGH). EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in ...

How severe is CVE-2012-5626?

CVE-2012-5626 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-5626?

Check the references section above for vendor advisories and patch information. Affected products include: Redhat Jboss Brms, Redhat Jboss Enterprise Application Platform, Redhat Jboss Enterprise Web Server, Redhat Jboss Operations Network, Redhat Jboss Portal.