How severe is CVE-2012-1100?

CVE-2012-1100 has a CVSS 2.0 base score of 5.8, rated medium severity.

Is CVE-2012-1100 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (66th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2012-1100?

CVE-2012-1100 primarily affects Redhat Jboss Operations Network. In total, 9 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2012-1100?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2012-1100 published?

CVE-2012-1100 was published on 2014-02-14 and last updated on 2026-06-16.

CVE-2012-1100

CVE-2012-1100 is a medium-severity vulnerability in Redhat Jboss Operations Network with a CVSS 2.0 base score of 5.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-287.

Key facts

Severity: Medium (CVSS 2.0 base score 5.8)
EPSS exploit prediction: 1% (66th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-287
Affected product: Redhat Jboss Operations Network
Published: 2014-02-14
Last modified: 2026-06-16

Description

Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.

Frequently asked questions

What is CVE-2012-1100?: Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.
How severe is CVE-2012-1100?: CVE-2012-1100 has a CVSS 2.0 base score of 5.8, rated medium severity.
Is CVE-2012-1100 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (66th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2012-1100?: CVE-2012-1100 primarily affects Redhat Jboss Operations Network. In total, 9 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2012-1100?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2012-1100 published?: CVE-2012-1100 was published on 2014-02-14 and last updated on 2026-06-16.

References

Affected products (9)

cpe:2.3:a:redhat:jboss_operations_network:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_operations_network:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_operations_network:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_operations_network:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_operations_network:2.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_operations_network:2.3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_operations_network:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_operations_network:2.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_operations_network:3.0:*:*:*:*:*:*:*

More vulnerabilities in Redhat Jboss Operations Network

CVE-2015-7501 — Critical (CVSS 9.8): Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and…
CVE-2016-6330 — Critical (CVSS 9.8): The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent…
CVE-2016-3737 — Critical (CVSS 9.8): The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via…
CVE-2015-0297 — Critical (CVSS 9.0): Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers…
CVE-2016-5422 — High (CVSS 8.8): The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add…
CVE-2010-0737 — High (CVSS 8.0): A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check…

All CVEs affecting Redhat Jboss Operations Network →

Other CWE-287 (Improper Authentication) vulnerabilities

CVE-2026-45480 — Critical (CVSS 10.0): Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-46389 — Critical (CVSS 10.0): UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs) consumed by UDS…
CVE-2026-10611 — Critical (CVSS 10.0): An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement.…
CVE-2026-47280 — Critical (CVSS 10.0): Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a…
CVE-2026-42822 — Critical (CVSS 10.0): Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges…
CVE-2026-20182 — Critical (CVSS 10.0): May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and…

Browse all CWE-287 (Improper Authentication) vulnerabilities →