Description

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.

Remediation

References

CVE-2016-7061

Related Vulnerabilities

WordPress Plugin Cookie Information-Free GDPR Consent Solution Privilege Escalation (1.4.2)

osCommerce Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-18572)

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Scripting (1.13.39)

WordPress Plugin Ad Manager by WD-Advanced Ad Manager Multiple Vulnerabilities (1.0.11)

RubyGems Cryptographic Issues Vulnerability (CVE-2012-2126)

Severity

Medium

Classification

CVE-2016-7061 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities