Red Hat Security AdvisoryRHSA-2014:0204
Red Hat JBoss Enterprise Application Platform 6.2.1 security update
Released 2014-02-24 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5 Server jboss-as-web-7.3.1-4.Final_redhat_4.1.ep6.el5
- Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6 Server jboss-as-web-7.3.1-4.Final_redhat_4.1.ep6.el6
Fixes 1 record
Priority LOW 10
The security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files.
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00346 · Published 2014-02-26 · Partial fix CWE-310
