PT-2012-1275 · Red Hat · Jboss Eap+1

David Jorm

·

CVE-2009-5066

·

Publicado

2012-08-13

·

Atualizado

2024-02-14

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions JBoss AS versions 5.0 and earlier JBoss EAP versions 5.0 and earlier
Description The issue allows local users to read credentials by listing the process and its arguments, as twiddle.sh in JBoss AS and EAP accepts credentials as command-line arguments.
Recommendations For JBoss AS versions 5.0 and earlier, consider removing or restricting access to the twiddle.sh script until a fix is available. For JBoss EAP versions 5.0 and earlier, consider removing or restricting access to the twiddle.sh script until a fix is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-5066
RHSA-2013:0191
RHSA-2013:0192
RHSA-2013:0193
RHSA-2013:0195
RHSA-2013:0196
RHSA-2013:0197

Produtos afetados

Jboss As
Jboss Eap