PT-2019-7839 · Red Hat · Kie Server+1
Pavel Polischouk
·
Publicado
2019-05-15
·
Atualizado
2023-02-12
·
CVE-2016-7043
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
KIE server and Business Central versions prior to 7.21.0.Final
Description
A security issue has been reported where
username and password are stored as plaintext Java properties. This allows any application deployed on the same server to access these properties, potentially granting access to other services.Recommendations
For versions prior to 7.21.0.Final, update to version 7.21.0.Final or later to resolve the issue. As a temporary workaround, consider restricting access to the server to minimize the risk of exploitation. Avoid using plaintext storage for sensitive information like
username and password until the issue is resolved.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Business Central
Kie Server