Red Hat Security Advisory

RHSA-2014:0563

Red Hat JBoss Enterprise Application Platform 6.2.3 update

Released 2014-05-27 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6 Server glassfish-jsf-eap6-2.1.28-2.redhat_3.1.ep6.el6, glassfish-jsf12-eap6-1.2_15-7.b01_redhat_11.1.ep6.el6, hibernate4-core-eap6-4.2.7-8.SP4_redhat_1.1.ep6.el6 +47

Fixes 1 record

TI-2014-00055 CVE-2014-0059 · GHSA-h9mr-9rp7-76qj

JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP)…

LOW 11

JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2.3, use world-readable permissions on audit.log, which allows local users to obtain sensitive information by reading this f…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00347 Published 2014-11-17 Partial fix CWE-200