PT-2013-3471 · Red Hat · Red Hat Jboss Enterprise Application Platform

Arun Babu Neelicattu · Publicado 2013-09-28 · Atualizado 2014-03-08 · CVE-2013-1921

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform versions prior to 6.1.1

Description The issue allows local users to obtain the admin encryption key by reading the Vault data file.

Recommendations For versions prior to 6.1.1, update to version 6.1.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-1921

RHSA-2013:1207

RHSA-2013:1208

Produtos afetados

Red Hat Jboss Enterprise Application Platform

Referências · 8

• http://rhn.redhat.com/errata/RHSA-2013-1207.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=948106 · Nota
• http://rhn.redhat.com/errata/RHSA-2013-1437.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2013-1209.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2013-1208.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1921 · Nota
• http://rhn.redhat.com/errata/RHSA-2014-0029.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1921 · Nota de Segurança