What’s Vulnerable › Vulnerabilities

CVE-2012-2312

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-12-18 · updated 2026-06-16
• Weakness: CWE-269

Description

An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains the security context from the process last used, which lets a local user obtain elevated privileges.

Affected products

• JBoss Application Server: 7.1.0, 7.1.1
• Red Hat JBoss EAP: 6.0.0-beta

References

• https://access.redhat.com/security/cve/cve-2012-2312
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2312
• https://security-tracker.debian.org/tracker/CVE-2012-2312
• https://access.redhat.com/security/cve/cve-2012-2312
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2312
• https://security-tracker.debian.org/tracker/CVE-2012-2312

Get alerted when CVE-2012-2312 or the next vulnerability affects your stack