NetSight
IP …
high7.5

CVE-2012-5629

The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6…

Impact

The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote attackers to bypass authentication via an empty password.

Affected products

VendorProductAffected versions
RedhatJboss Enterprise Application Platform
Versions 4.3.0, 5.2.0, 6.0.1
RedhatJboss Enterprise Web Platform
Version 5.2.0

Weakness classification

CWE-264

References