CVE-2012-3427

Опубликовано: 02 фев. 2014

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read sensitive files. This vulnerability can lead to information disclosure, specifically exposing Amazon Web Services (AWS) credentials.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00338

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-276

CWE-264

Связанные уязвимости

CVE-2012-3427

CVSS3: 5.5

redhat

почти 13 лет назад

EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.

CVE-2012-3427

CVSS3: 5.5

debian

почти 13 лет назад

A flaw was found in JBoss Enterprise Application Platform (EAP) and EC ...

GHSA-mhvm-wr2g-3xfq

CVSS3: 5.5

github

больше 4 лет назад

EPSS

Процентиль: 27%

0.00338

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-276

CWE-264