Vulnerability Details CVE-2012-4572
Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications' authorization decisions via a crafted application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.2%
CVSS Severity
CVSS v2 Score 3.7
References
Products affected by CVE-2012-4572
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:-
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.0.0
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.3
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.1
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.2
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.1
-
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0
-
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0
-
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1
-
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0
-
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.1
-
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.0
-
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.1
-
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.2
-
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:6.0.0