CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3369

The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 78.7%

CVSS Severity

CVSS v2 Score 4.0

References

Products affected by CVE-2012-3369

Redhat » Jboss Enterprise Application Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.0.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.0.1

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.0.1
Redhat » Jboss Enterprise Brms Platform » Version: 5.0.2

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.0.2
Redhat » Jboss Enterprise Brms Platform » Version: 5.1.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.1.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.2.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.3.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.3.0
Redhat » Jboss Enterprise Web Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3369

Products

Pricing

Contact Us