CVE-2012-1100
published 2014-02-14CVE-2012-1100: Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are…
PriorityP338medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
1.24%
65.7th percentile
Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | jboss_operations_network | <= 2.4.1 | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
| redhat | jboss_operations_network | — | — |
CVSS provenance
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
vendor_redhat5.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vffv-j7h7-crc3: Red Hat JBoss Operations Network (JON) 3
ghsa_unreviewed·2022-05-17
CVE-2012-1100 [MEDIUM] CWE-287 GHSA-vffv-j7h7-crc3: Red Hat JBoss Operations Network (JON) 3
Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.
Red Hat
JON: LDAP authentication allows any user access if bind credentials are bad
vendor_redhat·2012-02-28·CVSS 5.8
CVE-2012-1100 [MEDIUM] JON: LDAP authentication allows any user access if bind credentials are bad
JON: LDAP authentication allows any user access if bind credentials are bad
Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.
No detection rules found.
2014-02-14
Published