CVE-2012-3370

CVE-2012-3370 describes a privilege escalation vulnerability in JBoss Enterprise Application Platform, Web Platform, BRMS Platform, and SOA Platform versions prior to their respective 5.2.0/5.3.1 releases. When a security context is absent, the SecurityAssociation.getCredential method can return the credentials of a previous user, allowing remote attackers to gain unauthorized access. This vulnerability has a CVSS score of 5.8, indicating a medium severity due to its network attack vector, medium access complexity, and potential for partial confidentiality and integrity impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.