CVE-2012-4550

A flaw was found in JBoss Enterprise Application Platform. When role-based authorization is used for Enterprise Java Beans (EJB) access, the system does not correctly call the necessary authorization modules. This prevents Java Authorization Contract for Containers (JACC) permissions from being applied, allowing remote attackers to gain unauthorized access to EJBs.

Score
CVSS 3.1 5.3 Medium
Status
Modified - secalert@redhat.com
Published
2013-01-05
Last modified
2026-05-14
Weaknesses
CWE-264, CWE-280

Affected products

References

 
 
© AVABIS GmbH privacypolicy about