CVE-2014-0169

Name of the Vulnerable Software and Affected Versions JBoss EAP 6 (affected versions not specified)

Description The issue concerns a security domain in JBoss EAP 6 that uses a shared cache among all applications within the domain. This could potentially allow an authenticated user in one application to access protected resources in another application without proper authorization. The functionality, although intended, was not clearly documented, which may mislead users into believing the cache is isolated to a single application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.