CVE-2012-5629

The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote attackers to bypass authentication via an empty password.

Score
CVSS 2.0 7.5 High
Status
Modified - secalert@redhat.com
Published
2013-03-12
Last modified
2024-08-06
Weaknesses
CWE-264

Affected products

References

 
 
© AVABIS GmbH privacypolicy about