CVEvulnerability
CVE-2014-8175
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-07-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraging an account defined in the users.properties file.
Affected configurations
• redhat jboss fuse (<= 6.1.0)
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2015-1176.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-1177.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-1176.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-1177.html rhn.redhat.com