CVE-2012-5478

The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.

• CWE-264

• http://rhn.redhat.com/errata/RHSA-2013-0191.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0192.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0193.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0194.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0195.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0196.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0197.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0198.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0221.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0533.html
• http://secunia.com/advisories/51984Vendor Advisory
• http://secunia.com/advisories/52054Vendor Advisory
• http://securitytracker.com/id?1028042
• http://www.osvdb.org/89580
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81514
• http://rhn.redhat.com/errata/RHSA-2013-0191.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0192.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0193.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0194.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0195.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0196.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0197.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0198.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0221.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0533.html
• http://secunia.com/advisories/51984Vendor Advisory
• http://secunia.com/advisories/52054Vendor Advisory
• http://securitytracker.com/id?1028042
• http://www.osvdb.org/89580
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81514

Published

Feb 5, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5472lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x befo…
• CVE-2012-5473The Database activity module in Moodle 2.1.x before 2.1.9, 2…
• CVE-2012-5474The file /etc/openstack-dashboard/local_settings within Red …5.5
• CVE-2012-5475Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-5476Within the RHOS Essex Preview (2012.2) of the OpenStack dash…5.5
• CVE-2012-5477The smart proxy in Foreman before 1.1 uses a umask set to 0,…
• CVE-2012-5479The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x bef…
• CVE-2012-5480The Database activity module in Moodle 2.1.x before 2.1.9, 2…
• CVE-2012-5481Moodle 2.3.x before 2.3.3 allows remote authenticated users …
• CVE-2012-5482The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and…
• CVE-2012-5483tools/sample_data.sh in OpenStack Keystone 2012.1.3, when ac…
• CVE-2012-5484The client in FreeIPA 2.x and 3.x before 3.1.2 does not prop…