CVEvulnerability
CVE-2014-0058
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-02-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
The security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files.
Affected configurations
• redhat jboss enterprise application platform 6.0.0
• redhat jboss enterprise application platform 6.0.1
• redhat jboss enterprise application platform 6.1.0
• redhat jboss enterprise application platform 6.2.0
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2014-0204.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0205.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0034.html Vendor Advisory
- http://www.securityfocus.com/bid/65762 www.securityfocus.com
- http://rhn.redhat.com/errata/RHSA-2014-0204.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0205.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0034.html Vendor Advisory
- http://www.securityfocus.com/bid/65762 www.securityfocus.com