CVE-2012-5626
Description
EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation.
CWE
- (none)
Affected
- Red Hat / JBoss BRMS — v=5 [affected]
- Red Hat / JBoss Enterprise Application Platform — v=5 [affected]
- Red Hat / JBoss Operations Network — v=3.1 [affected]
- Red Hat / JBoss Portal — v=4 [affected]; v=5 [affected]
- Red Hat / JBoss SOA Platform — v=4.2 [affected]; v=4.3 [affected]; v=5 [affected]
- Red Hat / JBoss Enterprise Web Server — v=1 [affected]
CVSS
- (none)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5626 x_refsource_CONFIRM
- https://access.redhat.com/security/cve/cve-2012-5626 x_refsource_CONFIRM
Source
cvelistV5-main/cves/2012/5xxx/CVE-2012-5626.json