Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications' authorization decisions via a crafted application.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2013-10-28T21:00:00Z

Updated: 2024-08-06T20:42:54.629Z

Reserved: 2012-08-21T00:00:00Z

Link: CVE-2012-4572

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2013-10-28T21:55:04.970

Modified: 2013-10-30T14:47:39.153

Link: CVE-2012-4572

cve-icon Redhat

Severity : Low

Publid Date: 2013-05-20T00:00:00Z

Links: CVE-2012-4572 - Bugzilla