Lucene search
HistorySep 28, 2013 - 7:55 p.m.
CVE-2013-1921
cve-2013-1921
picketbox
red hat jboss
eap
vulnerability
encryption key
nvd
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.
Affected configurations
Node
redhatjboss_enterprise_application_platformRange≤6.1.0
ORredhatjboss_enterprise_application_platformMatch4.2.0
ORredhatjboss_enterprise_application_platformMatch4.3.0
ORredhatjboss_enterprise_application_platformMatch5.0.0
ORredhatjboss_enterprise_application_platformMatch5.0.1
ORredhatjboss_enterprise_application_platformMatch5.1.0
ORredhatjboss_enterprise_application_platformMatch5.1.1
ORredhatjboss_enterprise_application_platformMatch5.1.2
ORredhatjboss_enterprise_application_platformMatch5.2.0
ORredhatjboss_enterprise_application_platformMatch5.2.1
ORredhatjboss_enterprise_application_platformMatch5.2.2
ORredhatjboss_enterprise_application_platformMatch6.0.0
ORredhatjboss_enterprise_application_platformMatch6.0.1
Related
prion
prion
Input validation
2013-09-28 19:55:00
nvd
nvd
CVE-2013-1921
2013-09-28 19:55:02
cvelist
cvelist
CVE-2013-1921
2013-09-28 19:00:00
nessus
nessus
RHEL 6 : JBoss EAP (RHSA-2013:1208)
2013-09-13 00:00:00
JBoss Enterprise Application Platform 6.1.1 Update (RHSA-2013:1209)
2014-01-31 00:00:00
RHEL 5 : JBoss EAP (RHSA-2013:1207)
2013-09-13 00:00:00
redhat
redhat
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2013-1921