CVE

Id
60165  
CVE No.
CVE-2013-0218  
Status
Candidate  
Description
The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for the auto-install XML file, which allows local users to obtain the administrator password and the sucker password by reading this file.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
607294 60165 CVE-2013-0218 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=903073  View
607295 60165 CVE-2013-0218 REDHAT:RHSA-2013:0206  View
607296 60165 CVE-2013-0218 URL:http://rhn.redhat.com/errata/RHSA-2013-0206.html  View
607297 60165 CVE-2013-0218 REDHAT:RHSA-2013:0207  View
607298 60165 CVE-2013-0218 URL:http://rhn.redhat.com/errata/RHSA-2013-0207.html  View
607299 60165 CVE-2013-0218 REDHAT:RHSA-2013:0833  View
607300 60165 CVE-2013-0218 URL:http://rhn.redhat.com/errata/RHSA-2013-0833.html  View
607301 60165 CVE-2013-0218 BID:57652  View
607302 60165 CVE-2013-0218 URL:http://www.securityfocus.com/bid/57652  View
607303 60165 CVE-2013-0218 OSVDB:89698  View
607304 60165 CVE-2013-0218 URL:http://www.osvdb.org/89698  View
607305 60165 CVE-2013-0218 SECUNIA:52041  View
607306 60165 CVE-2013-0218 URL:http://secunia.com/advisories/52041  View
607307 60165 CVE-2013-0218 XF:jboss-eap-info-disc(81725)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23712 JVNDB-2013-005287 GNU coreutils 用 SUSE coreutils-i18n.patch におけるサービス運用妨害 (DoS) の脆弱性 GNU coreutils 用 SUSE coreutils-i18n.patch には、サービス運用妨害 (セグメンテーション違反およびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-0223 60165 1.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005287.html  View