CVE-2012-5626: High severity red hat jboss brms vulnerability

Published Jan 23, 2020

Updated

EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation.

Affected Software

9 affected components

redhat Jboss Brms=5

redhat JBoss Enterprise Application Platform=5.0.0

redhat Jboss Enterprise Web Server=1.0.0

redhat JBoss Operations Network=3.1

redhat Jboss Portal=4.0.0

redhat Jboss Portal=5.0.0

redhat Jboss Soa Platform=4.2

redhat Jboss Soa Platform=4.3

redhat Jboss Soa Platform=5

Event History

Jan 23, 2020

CVE Published

via MITRE·06:10 PM

Data Sourced

via MITRE·06:10 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2012-5626?

The severity of CVE-2012-5626 is high with a severity value of 7.5.

Which software is affected by CVE-2012-5626?

Red Hat JBoss BRMS 5, Red Hat JBoss Enterprise Application Platform 5, Red Hat JBoss Operations Network 3.1, Red Hat JBoss Portal 4 and 5, Red Hat JBoss SOA Platform 4.2, 4.3, and 5, and Red Hat JBoss Enterprise Web Server 1 are affected by CVE-2012-5626.

What does CVE-2012-5626 vulnerability in Red Hat JBoss ignore?

CVE-2012-5626 vulnerability in Red Hat JBoss ignores roles specified using the @RunAs annotation.

How can I fix CVE-2012-5626?

To fix CVE-2012-5626, it is recommended to update to the latest version of the affected software or apply the necessary patches provided by Red Hat.

Where can I find more information about CVE-2012-5626?

You can find more information about CVE-2012-5626 on the Red Hat security advisory page at https://access.redhat.com/security/cve/cve-2012-5626.