[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2012-4572":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":53,"references":56,"score":60,"epss_score":61,"epss_percentile":62,"is_kev":18,"cisa_kev_date_added":63,"cisa_kev_due_date":63,"cisa_ssvc":64,"attack_mappings":70,"exploits":77},161885,"CVE-2012-4572","EUVD-2012-4499","Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications' authorization decisions via a crafted application.","2013-10-28T21:55:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",3.7,"LOCAL","AV:L\u002FAC:H\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NONE","PARTIAL","HIGH",false,[20],"CWE-264",[22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52],"cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp09:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:continuous_delivery:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp10:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:beta:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.2:*:*:*:*:*:*:*",[54,55],"Redhat Jboss Enterprise Portal Platform","Redhat Jboss Enterprise Application Platform",[57,58,59],"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2013-0833.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2013-0834.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2013-1437.html",0.18,0.00341,0.26377,null,{"timestamp":63,"automatable":65,"tech_impact":66,"exploitation":67,"cisa_decision":68,"cisa_remediation_timeline":69},"no","partial","none",{},"FSU",[71],{"name":72,"source":73,"tactics":74,"technique_id":76},"Exploitation for Privilege Escalation","attack_vector",[75],"privilege-escalation","T1068",[]]