VULNERABILITY INTELLIGENCE

CVE-2012-5629

CVSS score7.5 HIGH
EPSS probability2.34%
CISA KEVNot currently listed
Published2013-03-12
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote attackers to bypass authentication via an empty password.

Primary references