CVE-2012-2377

Redhat Jboss Enterprise Portal Platform < 5.2.1 - Authentication Bypass

Title source: rule

Description

JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.

References (19)

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0191.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0192.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0193.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0194.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0195.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0196.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0197.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0198.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2012-1028.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2012-1125.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2012-1232.html

[Vendor Advisory] http://secunia.com/advisories/49669

[Vendor Advisory] http://secunia.com/advisories/50084

[Vendor Advisory] http://secunia.com/advisories/50549

[Third Party Advisory] http://secunia.com/advisories/51984

[Third Party Advisory, VDB Entry] http://www.osvdb.org/83085

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/76540

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/54183

[Issue Tracking] https://bugzilla.redhat.com/show_bug.cgi?id=823392

Scores

EPSS 0.0099

EPSS Percentile 76.6%

Classification

CWE

CWE-287

Status draft

Affected Products (28)

redhat/jboss_enterprise_portal_platform < 5.2.1

redhat/jboss_enterprise_portal_platform

redhat/jboss_enterprise_portal_platform

redhat/jboss_enterprise_portal_platform

redhat/jboss_enterprise_portal_platform

redhat/jboss_enterprise_portal_platform

redhat/jboss_enterprise_portal_platform

redhat/jboss_enterprise_portal_platform

redhat/jboss_enterprise_soa_platform < 5.2.0

redhat/jboss_enterprise_soa_platform

redhat/jboss_enterprise_soa_platform

redhat/jboss_enterprise_soa_platform

redhat/jboss_enterprise_soa_platform

redhat/jboss_enterprise_soa_platform

redhat/jboss_enterprise_soa_platform

... and 13 more

Timeline

Published Nov 23, 2012

Tracked Since Feb 18, 2026