CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-1154

mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote attackers to bypass access restrictions and gain access to applications deployed on the root context via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 55.9%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2012-1154

Redhat » Jboss Enterprise Application Platform » Version: 5.1.2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2
Redhat » Mod Cluster » Version: 1.0.10

cpe:2.3:a:redhat:mod_cluster:1.0.10
Redhat » Mod Cluster » Version: 1.1.0

cpe:2.3:a:redhat:mod_cluster:1.1.0
Redhat » Mod Cluster » Version: 1.1.1

cpe:2.3:a:redhat:mod_cluster:1.1.1
Redhat » Mod Cluster » Version: 1.1.2

cpe:2.3:a:redhat:mod_cluster:1.1.2
Redhat » Mod Cluster » Version: 1.1.3

cpe:2.3:a:redhat:mod_cluster:1.1.3
Redhat » Mod Cluster » Version: 1.1.4

cpe:2.3:a:redhat:mod_cluster:1.1.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-1154

Products

Pricing

Contact Us