An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2012-2148 | third party advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2148 | vendor advisory issue tracking |
https://access.redhat.com/security/cve/cve-2012-2148 | vendor advisory |