Description

The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.

Remediation

References

CVE-2012-3369

Related Vulnerabilities

WordPress 4.2.x Prototype Pollution (4.2 - 4.2.31)

Envoy Proxy Reachable Assertion Vulnerability (CVE-2021-29258)

WordPress 3.4.1 Multiple Vulnerabilities (2.0 - 3.4.1)

MySQL CVE-2020-2763 Vulnerability (CVE-2020-2763)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2364)

Severity

Medium

Classification

CVE-2012-3369 CWE-264

Tags

Missing Update Known Vulnerabilities