JBoss Enterprise Application Platform CVE-2012-0874 Multiple Security Bypass Vulnerabilities

Bugtraq ID:	57552
Class:	Design Error
CVE:	CVE-2012-0874
Remote:	Yes
Local:	No
Published:	Feb 21 2012 12:00AM
Updated:	Aug 01 2014 12:02AM
Credit:	David Jorm of the Red Hat
Vulnerable:	Red Hat JBoss Enterprise Web Platform for RHEL 5 Server 5 Red Hat JBoss Enterprise Web Platform for RHEL 4ES 5 Red Hat JBoss Enterprise Web Platform for RHEL 4AS 5 Red Hat JBoss Enterprise BRMS Platform 5.1 Red Hat JBoss Enterprise Application Platform for RHEL 5 Server 5 Red Hat JBoss Enterprise Application Platform for RHEL 4ES 5 Red Hat JBoss Enterprise Application Platform for RHEL 4AS 5 EMC Data Protection Advisor 5.8.1 Build 5991 EMC Data Protection Advisor 5.8 EMC Data Protection Advisor 5.7.1
Not Vulnerable:	Red Hat JBoss Enterprise Application Platform 5.1.2

JBoss Enterprise Application Platform CVE-2012-0874 Multiple Security Bypass Vulnerabilities

JBoss Enterprise Application Platform is prone to multiple security-bypass vulnerabilities.

Successful exploits may allow attackers to bypass certain security restrictions and perform unauthorized actions.

JBoss Enterprise Application Platform CVE-2012-0874 Multiple Security Bypass Vulnerabilities

Attackers can use a browser to exploit these issues.

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

JBoss Enterprise Application Platform CVE-2012-0874 Multiple Security Bypass Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

JBoss Enterprise Application Platform CVE-2012-0874 Multiple Security Bypass Vulnerabilities

References:

• JBoss Enterprise Application Platform Homepage (Red Hat)