CVE-2014-7853

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform (EAP) versions prior to 6.3.3

Description The issue affects the JBoss Application Server (WildFly) JacORB subsystem, where it fails to properly assign socket-binding-ref sensitivity classification to the security-domain attribute. This allows remote authenticated users to obtain sensitive information by accessing the security-domain attribute.

Recommendations For versions prior to 6.3.3, update to version 6.3.3 or later to resolve the issue.