CVE-2012-5629

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 04-02-2013 01:00

Last modified: - 04-02-2013 01:00

Total changes: - 9

Description

CVE-2012-5629 JBoss: allows empty password to authenticate against LDAP

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

7.5

Base score

Exploitability score

Impact score

Verification logic

AND

product=jbosssx2-0 AND versionEndExcluding=2.0.5-9.SP3_1_patch_01.ep5.el5

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_web_platform AND version=5

AND

product=jbosssx2-0 AND versionEndExcluding=2.0.5-9.1.SP3_1_patch_01.ep5.el6

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_web_platform AND version=5

AND

vendor=Red Hat Enterprise Linux AND product=jboss_data_grid AND version=6.1.0

AND

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_brms_platform AND version=5.3.1

AND

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=4.3.0

AND

product=jbossas-0 AND versionEndExcluding=4.3.0-12.GA_CP10_patch_01.1.ep1.el4

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=4.3.0

AND

product=jbossas-0 AND versionEndExcluding=4.3.0-12.GA_CP10_patch_01.1.ep1.el5

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=4.3.0

AND

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=5.2.0

AND

product=jbosssx2-0 AND versionEndExcluding=2.0.5-9.SP3_1_patch_01.ep5.el4

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=5

AND

product=jbosssx2-0 AND versionEndExcluding=2.0.5-9.SP3_1_patch_01.ep5.el5

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=5

AND

product=jbosssx2-0 AND versionEndExcluding=2.0.5-9.1.SP3_1_patch_01.ep5.el6

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=5

AND

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=6.0.1

AND

product=jboss-as-domain-management-0 AND versionEndExcluding=7.1.3-5.Final_redhat_5.ep6.el5

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=6

AND

product=picketbox-0 AND versionEndExcluding=4.0.14-3.Final_redhat_3.ep6.el5

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=6

AND

product=jboss-as-domain-management-0 AND versionEndExcluding=7.1.3-5.Final_redhat_5.ep6.el6

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=6

AND

product=picketbox-0 AND versionEndExcluding=4.0.14-3.Final_redhat_3.ep6.el6

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_application_platform AND version=6

AND

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_portal_platform AND version=4.3.0

AND

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_portal_platform AND version=5.2.2

AND

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_soa_platform AND version=4.2.0

AND

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_soa_platform AND version=4.3.0

AND

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_soa_platform AND version=5.3.1

AND

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_web_platform AND version=5.2.0

AND

product=jbosssx AND version=

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_brms_platform AND version=5

AND

product=picketbox AND version=

vendor=Red Hat Enterprise Linux AND product=jboss_data_grid AND version=6

AND

product=jbosssx AND version=

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_portal_platform AND version=4

AND

product=jbosssx AND version=

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_portal_platform AND version=5

AND

product=jbosssx AND version=

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_soa_platform AND version=4.2

AND

product=jbosssx AND version=

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_soa_platform AND version=4.3

AND

product=jbosssx AND version=

vendor=Red Hat Enterprise Linux AND product=jboss_enterprise_soa_platform AND version=5

Reference

Keywords

CVE-2012-5629

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

REDHAT

CVE-2012-5629

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures