CVE-2012-5629

CVE-2012-5629 describes an authentication bypass vulnerability in the default configurations of LdapLoginModule and LdapExtLoginModule within JBoss Enterprise Application Platform (EAP) versions 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0. This critical flaw, with a CVSS score of 7.5, allows remote attackers to gain unauthorized access by submitting an empty password. The attack requires no authentication, has low complexity, and can lead to partial compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been identified, and community discussion is minimal, the inherent risk of an authentication bypass remains significant.