A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read …
中危 CVSS 5.5
摘要
A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read sensitive files. This vulnerability can lead to information disclosure, specifically exposing Amazon Web Services (AWS) credentials.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- http://rhn.redhat.com/errata/RHSA-2012-1376.html Vendor Advisory
- http://secunia.com/advisories/51016 Vendor Advisory
- http://www.osvdb.org/86409
- http://www.securityfocus.com/bid/55945
- https://access.redhat.com/errata/RHSA-2012:1376
- https://access.redhat.com/security/cve/CVE-2012-3427
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79398
- http://rhn.redhat.com/errata/RHSA-2012-1376.html Vendor Advisory
- http://secunia.com/advisories/51016 Vendor Advisory
- http://www.osvdb.org/86409
- http://www.securityfocus.com/bid/55945
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79398
时间线
- nvd_ingest NVD