Description

The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors.

Remediation

References

CVE-2014-3586

Related Vulnerabilities

WordPress Plugin Titan Framework Cross-Site Scripting (1.5.2)

TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3717)

Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2003-1418)

WordPress Plugin WL Katalogsok PHP Object Injection (3.5.4)

WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Cross-Site Scripting (2.30)

Severity

Low

Classification

CVE-2014-3586 CWE-264

Tags

Missing Update Known Vulnerabilities