CVE-2012-4572

CVE-2012-4572 describes a vulnerability in Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 where the system fails to properly load custom authorization modules for new applications if class names are shared, enabling local users to manipulate authorization decisions. With a CVSS score of 3.7, this vulnerability is considered low severity, requiring local access and high attack complexity to achieve partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it has not garnered widespread attention.