الباحثون
رجوع
Carlo De Wolf
باحث من
Red Hat
#27532
من 60,596
9.8
إجمالي CVSS
الثغرات
·
2
متوسطة
2
PT-2013-1602
2013-02-05
4.0
CVE-2012-3369
Red Hat
Jboss Web Platform
The issue allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used. This occurs due to a flaw in the CallerIdentityLoginModule.
PT-2013-1603
2013-02-05
5.8
CVE-2012-3370
Red Hat
Jboss Web Platform
The issue allows remote attackers to gain privileges as other users due to the SecurityAssociation.getCredential method returning the credentials of the previous user when a security context is not provided.