Orta CVSS 5.5
CVE-2012-3427: Jboss Enterprise Application Platform: güvenlik açığı
Açıklama (NVD)
A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read sensitive files. This vulnerability can lead to information disclosure, specifically exposing Amazon Web Services (AWS) credentials.
Özet bilgiler
- Ürün
- Redhat Jboss Enterprise Application Platform
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS
- %0,34 (yüzdelik 27)
- CWE
- CWE-276
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-jboss-enterprise-application-platform | 5.1.2 | 5.1.2 | — |