CVE-2012-3347 | BDVDB-2026-50528 Detail

Description#

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/MAPG-8RQL83
http://www.kb.cert.org/vuls/id/773035
http://secunia.com/advisories/49335

Exploit#

No public exploit known

History#

Version 12012-06-13Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.