CVE-2013-1921

Опубликовано: 28 сент. 2013

Источник: nvd

CVSS2: 1.9

EPSS Низкий

Описание

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

Ссылки

http://rhn.redhat.com/errata/RHSA-2013-1207.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1208.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1209.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1437.html
http://rhn.redhat.com/errata/RHSA-2014-0029.html
https://bugzilla.redhat.com/show_bug.cgi?id=948106
http://rhn.redhat.com/errata/RHSA-2013-1207.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1208.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1209.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1437.html
http://rhn.redhat.com/errata/RHSA-2014-0029.html
https://bugzilla.redhat.com/show_bug.cgi?id=948106

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*

Версия до 6.1.0 (включая)

cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.2:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00049

Низкий

1.9 Low

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2013-1921

redhat

больше 12 лет назад

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

GHSA-p398-vx5x-3pgp

github

больше 3 лет назад

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

EPSS

Процентиль: 15%

0.00049

Низкий

1.9 Low

CVSS2

Дефекты

CWE-310