CVE-2014-3586 in Enterprise Application Platform
Summary
The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
05/14/2014
Disclosure
04/21/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 75029 | Red Hat Enterprise Application Platform Command Line .jboss-cli-history access control | 264 | Not defined | Official fix | CVE-2014-3586 |