NetSight
IP …
low3.7

CVE-2012-4572

Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization modul…

Impact

Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications' authorization decisions via a crafted application.

Affected products

VendorProductAffected versions
RedhatJboss Enterprise Application Platform
through 6.0.1
Versions 4.2.0, 4.3.0, 5.0.0, 5.0.1, 5.1.0
RedhatJboss Enterprise Portal Platform
through 6.0.0
Versions 4.3.0, 5.0.0, 5.0.1, 5.1.0, 5.1.1

Weakness classification

CWE-264

References