Description

JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) before 6.0.1, when using role-based authorization for Enterprise Java Beans (EJB) access, does not call the intended authorization modules, which prevents JACC permissions from being applied and allows remote attackers to obtain access to the EJB.

Remediation

References

CVE-2012-4550

Related Vulnerabilities

WordPress Plugin WordPress Leads Cross-Site Scripting (1.6.2)

WordPress Plugin User Access Manager Cross-Site Scripting (1.2.6.7)

WordPress Plugin Total Upkeep-WordPress Backup plus Restore & Migrate by BoldGrid Information Disclosure (1.14.9)

WordPress Plugin Weekly Schedule Cross-Site Scripting (3.4.2)

FluxBB Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2020-28873)

Severity

Medium

Classification

CVE-2012-4550 CWE-264

Tags

Missing Update Known Vulnerabilities