Description

The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors.

Remediation

References

CVE-2014-3586

Related Vulnerabilities

GlassFish CVE-2016-5477 Vulnerability (CVE-2016-5477)

WordPress Plugin Product Slider for WooCommerce Security Bypass (2.5.6)

WordPress Plugin Online Lesson Booking Multiple Vulnerabilities (0.8.6)

WordPress Plugin GA Top post for WP by Asentechllc Security Bypass (1.0)

Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37162)

Severity

Low

Classification

CVE-2014-3586 CWE-264

Tags

Missing Update Known Vulnerabilities