VULNERABILITY INTELLIGENCE

CVE-2012-4550

CVSS score5.3 MEDIUM
EPSS probability2.10%
CISA KEVNot currently listed
Published2013-01-05
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A flaw was found in JBoss Enterprise Application Platform. When role-based authorization is used for Enterprise Java Beans (EJB) access, the system does not correctly call the necessary authorization modules. This prevents Java Authorization Contract for Containers (JACC) permissions from being applied, allowing remote attackers to gain unauthorized access to EJBs.

Weakness classification

  • CWE-280: Improper Handling of Insufficient Permissions or Privileges

Primary references