CVE-2014-7849

CVE-2014-7849 describes a vulnerability in JBoss Enterprise Application Platform (EAP) versions 6.2.0 through 6.3.2 where the Role Based Access Control (RBAC) implementation fails to properly verify authorization conditions. This flaw allows remote authenticated users with the Maintainer role to add, modify, or undefine restricted attributes, impacting the integrity of the system. The vulnerability has a CVSS score of 4.0, indicating a low severity, with an attack vector over the network, low attack complexity, requiring authentication, and resulting in partial integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.