Description

EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.

Remediation

References

CVE-2012-3427

Related Vulnerabilities

Oracle Database Server CVE-2009-1973 Vulnerability (CVE-2009-1973)

MySQL CVE-2014-2434 Vulnerability (CVE-2014-2434)

Joomla Other Vulnerability (CVE-2006-1030)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.13)

PostgreSQL Other Vulnerability (CVE-2002-0802)

Severity

Low

Classification

CVE-2012-3427 CWE-264

Tags

Missing Update Known Vulnerabilities