Published: 12/03/2013 Updated: 13/02/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote malicious users to bypass authentication via an empty password.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat jboss enterprise web platform 5.2.0
redhat jboss enterprise application platform 6.0.1
redhat jboss enterprise application platform 4.3.0
redhat jboss enterprise application platform 5.2.0

Synopsis Important: JBoss Enterprise Application Platform 430 CP10 security update Type/Severity Security Advisory: Important Topic Updated JBoss Enterprise Application Platform 430 CP10 packages that fixone security issue are now available for Red Hat Enterprise Linux 4 and 5The Red Hat Security Respo ...

Synopsis Important: JBoss Enterprise Application Platform 601 security update Type/Severity Security Advisory: Important Topic An update for JBoss Enterprise Application Platform 601 which fixes onesecurity issue is now available from the Red Hat Customer PortalThe Red Hat Security Response Team has ra ...

Synopsis Important: JBoss Enterprise Application Platform 601 security update Type/Severity Security Advisory: Important Topic Updated JBoss Enterprise Application Platform 601 packages that fix onesecurity issue are now available for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team h ...

Synopsis Important: jbosssx security update Type/Severity Security Advisory: Important Topic An update for JBoss Enterprise BRMS Platform 531, JBoss Enterprise PortalPlatform 430 CP07 and 522, and JBoss Enterprise SOA Platform 420CP05, and 430 CP05 which fixes one security issue is now available f ...

Synopsis Important: JBoss Enterprise Application Platform 430 CP10 security update Type/Severity Security Advisory: Important Topic An update for JBoss Enterprise Application Platform 430 CP10 which fixesone security issue is now available from the Red Hat Customer PortalThe Red Hat Security Response T ...

Synopsis Important: JBoss Enterprise SOA Platform 531 update Type/Severity Security Advisory: Important Topic JBoss Enterprise SOA Platform 531, which fixes multiple security issues,various bugs, and adds enhancements, is now available from the Red HatCustomer PortalThe Red Hat Security Response Team h ...

CVE-2012-5629

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect