CVE-2012-2312: Red Hat JBoss Application Server

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains the security context from the process last used, which lets a local user obtain elevated privileges.

Affected products

• Red Hat JBoss Application Server: version 7.1.0 only; version 7.1.1 only
• Red Hat JBoss Enterprise Application Platform: version 6.0.0 only

Published 2019-12-18. Last modified 2026-06-16.