Description

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

Remediation

References

CVE-2013-1921

Related Vulnerabilities

XWiki CVE-2023-26471 Vulnerability (CVE-2023-26471)

Undertow Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-1745)

WordPress Plugin Rent-A-Car TimThumb Arbitrary File Upload (1.0)

WordPress Plugin AccessPress Social Icons includes Backdoor [Only if downloaded via the vendor website] (1.8.2)

WordPress Plugin Facebook Like Box Multiple Vulnerabilities (2.9.1)

Severity

Low

Classification

CVE-2013-1921

Tags

Missing Update Known Vulnerabilities