CVE-2012-3369

MEDIUM · CVSS 4 EPSS 2.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-02-05 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-3369

Severity

MEDIUM

CVSS

EPSS

2.69%

Original Filing — NVD Description

The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.