CVE-2012-4550

Medium

Description

A flaw was found in JBoss Enterprise Application Platform. When role-based authorization is used for Enterprise Java Beans (EJB) access, the system does not correctly call the necessary authorization modules. This prevents Java Authorization Contract for Containers (JACC) permissions from being applied, allowing remote attackers to gain unauthorized access to EJBs.

SeverityMedium

CVSS5.3

Exploit probability—

Product

Redhat Jboss Enterprise Application Platform

PublishedJan 5, 2013

First seenJan 5, 2013

Weakness typeCWE-280CWE-280

How to fix

Vendor advisories

access.redhat.com/errata/RHSA-2012:1591
access.redhat.com/errata/RHSA-2012:1592
access.redhat.com/errata/RHSA-2012:1594

Affected products

Product	Affected versions	Fixed in
redhat jboss_enterprise_application_platform	6.0.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.