Description

The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.

Remediation

References

CVE-2012-3369

Related Vulnerabilities

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Unspecified Vulnerability (7.0.1)

MySQL CVE-2018-2600 Vulnerability (CVE-2018-2600)

WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Cross-Site Scripting (1.5.5)

WordPress Plugin ShortPixel Adaptive Images-WebP, AVIF, CDN, Image Optimization Cross-Site Scripting (3.6.2)

WordPress Plugin ToolPage Cross-Site Scripting (1.6.1)

Severity

Medium

Classification

CVE-2012-3369 CWE-264

Tags

Missing Update Known Vulnerabilities