CVE-2012-3427

Опубликовано: 02 фев. 2014

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.

Ссылки

http://rhn.redhat.com/errata/RHSA-2012-1376.html
Vendor Advisory
http://secunia.com/advisories/51016
Vendor Advisory
http://www.osvdb.org/86409
http://www.securityfocus.com/bid/55945
https://exchange.xforce.ibmcloud.com/vulnerabilities/79398
http://rhn.redhat.com/errata/RHSA-2012-1376.html
Vendor Advisory
http://secunia.com/advisories/51016
Vendor Advisory
http://www.osvdb.org/86409
http://www.securityfocus.com/bid/55945
https://exchange.xforce.ibmcloud.com/vulnerabilities/79398

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.00353

Низкий

2.1 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2012-3427

CVSS3: 5.5

redhat

больше 12 лет назад

CVE-2012-3427

debian

больше 12 лет назад

EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platfor ...

GHSA-mhvm-wr2g-3xfq

github

около 4 лет назад

EPSS

Процентиль: 28%

0.00353

Низкий

2.1 Low

CVSS2

Дефекты

CWE-264