Описание
EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.
EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2012-3427
- https://access.redhat.com/errata/RHSA-2012:1376
- https://access.redhat.com/security/cve/CVE-2012-3427
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79398
- http://rhn.redhat.com/errata/RHSA-2012-1376.html
- http://secunia.com/advisories/51016
- http://www.osvdb.org/86409
- http://www.securityfocus.com/bid/55945
Связанные уязвимости
EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.
A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read sensitive files. This vulnerability can lead to information disclosure, specifically exposing Amazon Web Services (AWS) credentials.
A flaw was found in JBoss Enterprise Application Platform (EAP) and EC ...