Red Hat Security Advisory

RHSA-2014:0565

Red Hat JBoss Enterprise Application Platform 6.2.3 update

Released 2014-05-27 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.2

Fixes 1 record

TI-2014-00055 CVE-2014-0059 · GHSA-h9mr-9rp7-76qj

JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP)…

LOW 11

JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2.3, use world-readable permissions on audit.log, which allows local users to obtain sensitive information by reading this f…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00347 Published 2014-11-17 Partial fix CWE-200