CVE Reference: CVE-2013-0218

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2013-0218

Description:
The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for the auto-install XML file, which allows local users to obtain the administrator password and the sucker password by reading this file.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/81725

SAID
  Secunia Advisory: SA52041

REDHAT
  http://rhn.redhat.com/errata/RHSA-2013-0833.html
  http://rhn.redhat.com/errata/RHSA-2013-0207.html
  http://rhn.redhat.com/errata/RHSA-2013-0206.html

OSVDB
  89698

MISC

BID
  57652


Return to the previous page.