CVE-2012-3347

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828.

• CWE-264

• http://secunia.com/advisories/49335
• http://www.kb.cert.org/vuls/id/773035US Government Resource
• http://www.kb.cert.org/vuls/id/MAPG-8RQL83US Government Resource
• http://secunia.com/advisories/49335
• http://www.kb.cert.org/vuls/id/773035US Government Resource
• http://www.kb.cert.org/vuls/id/MAPG-8RQL83US Government Resource

Published

Jun 13, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3338IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a rem…5.3
• CVE-2012-3340IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to …4.3
• CVE-2012-3341IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerabl…5.4
• CVE-2012-3342Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2012-3343Cross-site request forgery (CSRF) vulnerability in Microdasy…
• CVE-2012-3345ioquake3 before r2253 allows local users to overwrite arbitr…
• CVE-2012-3350SQL injection vulnerability in index.php in Webmatic 3.1.1 a…
• CVE-2012-3351Multiple cross-site scripting (XSS) vulnerabilities in LongT…6.1
• CVE-2012-3353The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in t…
• CVE-2012-3354doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when…
• CVE-2012-3355(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) …
• CVE-2012-3356The remote SVN views functionality (lib/vclib/svn/svn_ra.py)…