PT-2013-2163
CVE-2013-0218
·
تاريخ النشر
2013-02-05
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) versions 5.1.2 through 5.2.0
Description
The issue concerns the GUI installer in JBoss EAP and EWP, which uses world-readable permissions for the auto-install XML file. This allows local users to read the file and obtain sensitive information, including the administrator password and another password.
Recommendations
For versions 5.1.2 through 5.2.0, consider changing the permissions of the auto-install XML file to prevent unauthorized access until a fix is available. As a temporary workaround, restrict local access to the system to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾