CVE-2014-3586 in Enterprise Application Platform

Resumen (Inglés)

The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2014-05-14

Divulgación

2015-04-21

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
75029	Red Hat Enterprise Application Platform Command Line .jboss-cli-history escalada de privilegios	264	No está definido	Arreglo oficial	CVE-2014-3586

Fuentes

• MITRE
• NVD
• CVE Details