CVE-2014-0058 | BDVDB-2026-60064 Detail

Description#

The security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rhn.redhat.com/errata/RHSA-2014-0204.html
http://rhn.redhat.com/errata/RHSA-2015-0034.html
http://rhn.redhat.com/errata/RHSA-2014-0205.html
http://www.securityfocus.com/bid/65762

Exploit#

No public exploit known

History#

Version 12014-02-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.