Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jboss EAP Permissions Privileges and Access Controls Vulnerability - CVE-2012-1154 - Vulnerability Database
Jboss EAP

Jboss EAP Permissions Privileges and Access Controls Vulnerability - CVE-2012-1154

Medium
Reference: CVE-2012-1154
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-1154
Title: Jboss EAP Permissions Privileges and Access Controls Vulnerability
Overview:

mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4 as used in JBoss Enterprise Application Platform 5.1.2 when quotROOTquot is set to excludedContexts exposes the root context of the server which allows remote attackers to bypass access restrictions and gain access to applications deployed on the root context via unspecified vectors.