CVE-2012-1100
Last modified
CVE-2012-1100 is a vulnerability of currently unknown severity. Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.. EPSS estimates a 1.24% chance of exploitation in the next 30 days.
Description
Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Jboss Operations Network | <= 2.4.1 |
| Redhat | Jboss Operations Network | 2.0.0 |
| Redhat | Jboss Operations Network | 2.0.1 |
| Redhat | Jboss Operations Network | 2.1.0 |
| Redhat | Jboss Operations Network | 2.2 |
| Redhat | Jboss Operations Network | 2.3 |
| Redhat | Jboss Operations Network | 2.3.1 |
| Redhat | Jboss Operations Network | 2.4 |
| Redhat | Jboss Operations Network | 3.0 |
References
- http://rhn.redhat.com/errata/RHSA-2012-0396.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0406.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0396.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0406.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-1100?
How severe is CVE-2012-1100?
How do I fix CVE-2012-1100?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-1094JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle defa…7.5
- CVE-2012-1095osc before 0.134 might allow remote OBS repository servers o…
- CVE-2012-1096NetworkManager 0.9 and earlier allows local users to use oth…5.5
- CVE-2012-1097The regset (aka register set) feature in the Linux kernel be…7.8
- CVE-2012-1098Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.…
- CVE-2012-1099Cross-site scripting (XSS) vulnerability in actionpack/lib/a…
- CVE-2012-1101systemd 37-1 does not properly handle non-existent services,…5.5
- CVE-2012-1102It was discovered that the XML::Atom Perl module before vers…7.5
- CVE-2012-1103emacs/notmuch-mua.el in Notmuch before 0.11.1, when using th…
- CVE-2012-1104A Security Bypass vulnerability exists in the phpCAS 1.2.2 l…5.3
- CVE-2012-1105An Information Disclosure vulnerability exists in the Jasig …5.5
- CVE-2012-1106The C handler plug-in in Automatic Bug Reporting Tool (ABRT)…
Are you affected by CVE-2012-1100?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST