Description

Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which allows local users to obtain sensitive information by reading this file.

Remediation

References

CVE-2009-3554

Related Vulnerabilities

MySQL CVE-2017-3638 Vulnerability (CVE-2017-3638)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2427)

WordPress Plugin Contentboxes Cross-Site Scripting (1.1)

Oracle Application Server CVE-2010-0066 Vulnerability (CVE-2010-0066)

Dotclear Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-1613)

Severity

Low

Classification

CVE-2009-3554 CWE-200

Tags

Missing Update Known Vulnerabilities