Lucene search

RedhatCVE-2012-3427

HistoryFeb 02, 2014 - 8:55 p.m.

CVE-2012-3427

2014-02-0220:55:04

CWE-264

redhat

web.nvd.nist.gov

ec2

ami

jboss eap

aws

security vulnerability

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.

Affected configurations

Nvd

Node

redhatjboss_enterprise_application_platformMatch5.1.2

VendorProductVersionCPE
redhatjboss_enterprise_application_platform5.1.2cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	jboss_enterprise_application_platform	5.1.2	cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:::::::*

References

rhn.redhat.com/errata/RHSA-2012-1376.html

secunia.com/advisories/51016

www.osvdb.org/86409

www.securityfocus.com/bid/55945

exchange.xforce.ibmcloud.com/vulnerabilities/79398

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2012-3427