CVEvulnerability
CVE-2013-1921
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-09-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.
Affected configurations
• redhat jboss enterprise application platform (<= 6.1.0)
• redhat jboss enterprise application platform 4.2.0
• redhat jboss enterprise application platform 4.3.0
• redhat jboss enterprise application platform 5.0.0
• redhat jboss enterprise application platform 5.0.1
• redhat jboss enterprise application platform 5.1.0
• redhat jboss enterprise application platform 5.1.1
• redhat jboss enterprise application platform 5.1.2
• redhat jboss enterprise application platform 5.2.0
• redhat jboss enterprise application platform 5.2.1
• redhat jboss enterprise application platform 5.2.2
• redhat jboss enterprise application platform 6.0.0
• redhat jboss enterprise application platform 6.0.1
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2013-1207.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1208.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1209.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1437.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0029.html rhn.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=948106 bugzilla.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1207.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1208.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1209.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1437.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0029.html rhn.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=948106 bugzilla.redhat.com