PT-2018-4971 · Red Hat · Red Hat Jboss Enterprise Application Platform

Bharti Kundal

·

Publicado

2018-09-10

·

Atualizado

2019-10-09

·

CVE-2016-7061

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform versions prior to 7.0.4
Description An information disclosure issue was discovered in the configuration of RBAC, where users with a Monitor role can view sensitive information marked as such.
Recommendations For versions prior to 7.0.4, update to version 7.0.4 or later to resolve the issue.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-7061
RHSA-2017:0170
RHSA-2017:0171
RHSA-2017:0173
RHSA-2017:0244
RHSA-2017:0245
RHSA-2017:0246
RHSA-2017:0250
RHSA-2017:3454
RHSA-2017:3455
RHSA-2017:3458

Produtos afetados

Red Hat Jboss Enterprise Application Platform