CVE-2012-3369

CVE-2012-3369 describes a privilege escalation vulnerability in the CallerIdentityLoginModule of several JBoss Enterprise products, including EAP, EWP, BRMS Platform, and SOA Platform, all before specific versions. Remote attackers can exploit this by providing a null password, causing the system to reuse the previous user's credentials. With a CVSS score of 4.0, this vulnerability has a network attack vector and high attack complexity, potentially leading to partial confidentiality and integrity compromise. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.