{"id":"CVE-2012-0052","aliases":["EUVD-2012-0091","GHSA-fhpq-g3rr-xhmq"],"status":"published","title":"Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON...","description":"Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01182,"percentile":0.67965,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2014-02-14T15:00:00Z","modified":"2026-06-16T23:36:34Z","products":[{"vendor":"redhat","product":"jboss_operations_network"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=781964","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0089.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0406.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0052"},{"url":"https://github.com/advisories/GHSA-fhpq-g3rr-xhmq"}],"sources":{"cve":[{"id":"CVE-2012-0052","description":"Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.","status":"published","published":"2014-02-14T15:00:00Z","modified":"2024-08-06T18:09:17.298Z","updated_at":"2026-11-02T14:34:52.981189Z"}],"euvd":[{"id":"EUVD-2012-0091","description":"Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.","status":"published","published":"2014-02-14T15:00:00Z","modified":"2024-08-06T18:09:17Z","updated_at":"2026-11-03T01:56:23.098352Z"}],"ghsa":[{"id":"GHSA-fhpq-g3rr-xhmq","title":"Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON...","description":"Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.","status":"published","published":"2022-05-04T00:27:49Z","modified":"2023-02-01T05:01:31Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:49:44.320253Z"}],"nvd":[{"id":"CVE-2012-0052","description":"Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.","status":"published","published":"2014-02-14T15:55:04.75Z","modified":"2026-06-16T23:36:34.733Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:17.375282Z"}]}}