CVE-2014-0059 in JBoss

摘要

由 VulDB • 2026-07-03

JBoss SX e PicketBox, nelle versioni utilizzate in Red Hat JBoss Enterprise Application Platform (EAP) precedenti alla versione 6.2.3, utilizzano permessi di lettura globale per il file audit.log, consentendo agli utenti locali di ottenere informazioni sensibili leggendo tale file.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• 预定: 2013-12-03
• 披露: 2014-11-17
• 管理: 已接受
• 条目: VDB-67186
• CPE: 准备好
• CWE: CWE-200 (已确认)
• CVSS: 2.1 (NVD)
• EPSS: 0.00347
• KEV: 否
• 活动: 非常低
• 部门: Insurance, Hospital, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-0059
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-0059
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-0059/