The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss…
Priority MEDIUM 46CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Partial Red Hat: 8 fixed, 3 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-287.
Summary
The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 do not require authentication by default in certain profiles, which might allow remote attackers to invoke MBean methods and execute arbitrary code via unspecified vectors. NOTE: this issue can only be exploited when the interceptor is not properly configured with a "second layer of authentication," or when used in conjunction with other vulnerabilities that bypass this second layer.
Why it matters now
EPSS 0.15561 96th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Partial Red Hat: 10 advisoriesRed Hat: 8 fixed, 3 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:* | 5.2.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0:*:*:*:*:*:*:* | 5.2.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:* | up to 5.3.0 | Vulnerable | Red Hat |
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:* Versions 5.2.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0:*:*:*:*:*:*:* Versions 5.2.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:* Versions up to 5.3.0 Vulnerable ·Red Hat
Remediation
Red Hat 10 advisories
- RHSA-2013:0533 Released 2013-02-20 · Red Hat rating ImportantJBoss Enterprise SOA Platform 5.3.1 update
- Red Hat JBoss SOA Platform 5.3
- RHSA-2013:0221 Released 2013-01-31 · Red Hat rating ImportantJBoss Enterprise BRMS Platform 5.3.1 update
- JBoss Enterprise BRMS Platform 5.3
- RHSA-2013:0198 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Web Platform 5.2.0 update
- Red Hat JBoss Web Platform 5.2
Show 7 more Red Hat advisories
- RHSA-2013:0197 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Web Platform 5.2.0 update
- Red Hat JBoss Web Platform 5 for RHEL 4 AS aopalliance-1.0-5.2.jdk6.ep5.el4, apache-cxf-2.2.12-6.1.patch_04.ep5.el4, bsh2-2.0-0.b4.15.1.patch01.ep5.el4 +47
- Red Hat JBoss Web Platform 5 for RHEL 4 ES aopalliance-1.0-5.2.jdk6.ep5.el4, apache-cxf-2.2.12-6.1.patch_04.ep5.el4, bsh2-2.0-0.b4.15.1.patch01.ep5.el4 +47
- RHSA-2013:0196 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Web Platform 5.2.0 update
- Red Hat JBoss Web Platform 5 for RHEL 5 Server aopalliance-1.0-5.2.jdk6.ep5.el5, apache-cxf-2.2.12-6.1.patch_04.ep5.el5, bsh2-2.0-0.b4.15.1.patch01.ep5.el5 +47
- RHSA-2013:0195 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Web Platform 5.2.0 update
- Red Hat JBoss Web Platform 5 for RHEL 6 Server aopalliance-1.0-5.3.ep5.el6, apache-cxf-2.2.12-6.1.patch_04.ep5.el6, bsh2-2.0-0.b4.15.patch01.ep5.el6 +47
- RHSA-2013:0193 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Application Platform 5.2.0 update
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS aopalliance-1.0-5.2.jdk6.ep5.el4, apache-cxf-2.2.12-6.1.patch_04.ep5.el4, bsh2-2.0-0.b4.15.1.patch01.ep5.el4 +47
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES aopalliance-1.0-5.2.jdk6.ep5.el4, apache-cxf-2.2.12-6.1.patch_04.ep5.el4, bsh2-2.0-0.b4.15.1.patch01.ep5.el4 +47
- RHSA-2013:0191 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Application Platform 5.2.0 update
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server aopalliance-1.0-5.3.ep5.el6, apache-cxf-2.2.12-6.1.patch_04.ep5.el6, bsh2-2.0-0.b4.15.patch01.ep5.el6 +47
- RHSA-2013:0192 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Application Platform 5.2.0 update
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server aopalliance-1.0-5.2.jdk6.ep5.el5, apache-cxf-2.2.12-6.1.patch_04.ep5.el5, bsh2-2.0-0.b4.15.1.patch01.ep5.el5 +47
- RHSA-2013:0194 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Application Platform 5.2.0 update
- Red Hat JBoss Enterprise Application Platform 5.2
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat JBoss Portal 4 | Affected | No fix yet |
| Red Hat JBoss Portal 5 | Affected | No fix planned: Will not fix |
| Red Hat JBoss SOA Platform 5 | Affected | No fix yet |
| JBoss Enterprise BRMS Platform 5.3 | Fixed | RHSA-2013:0221 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server | Fixed | RHSA-2013:0192 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server | Fixed | RHSA-2013:0191 |
| Red Hat JBoss Enterprise Application Platform 5.2 | Fixed | RHSA-2013:0194 |
| Red Hat JBoss SOA Platform 5.3 | Fixed | RHSA-2013:0533 |
| Red Hat JBoss Web Platform 5 for RHEL 5 Server | Fixed | RHSA-2013:0196 |
| Red Hat JBoss Web Platform 5 for RHEL 6 Server | Fixed | RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5.2 | Fixed | RHSA-2013:0198 |
Not affected: 1 product
- Red Hat JBoss BRMS 5
Timeline
- 2026-10-02 Threatist record created from CVE-2012-0874
- 2026-10-03 Alias added: GHSA-cjrh-9rp2-h6f2
References
Exploit 1
Advisory 10
More Red Hat Jboss Enterprise Application Platform vulnerabilities
- TI-2017-08941 Deserialization of untrusted data in Red Hat jbossas KEVCVSS 3.1CRITICAL 9.8
- TI-2010-01790 JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for… KEVCVSS 3.1HIGH 8.8
- TI-2017-09342 Unrestricted file upload in Apache Tomcat KEVCVSS 3.1HIGH 8.1
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2010-01383 The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application… KEVCVSS 3.1HIGH 7.5
- TI-2017-09354 XML external entity injection in Apache Solr before 7.1 with Apache Lucene before 7.1 CVSS 3.1CRITICAL 9.8
Sources
- CVE-2012-0874 · CVE Program
- CVE-2012-0874 · NVD
- FIRST EPSS
- GHSA-cjrh-9rp2-h6f2 · GitHub Advisory Database · CC BY 4.0
- CVE-2012-0874 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences