CVE-2014-7853

The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to the security-domain attribute, which allows remote authenticated users to obtain sensitive information by leveraging access to the security-domain attribute.

Score
CVSS 2.0 4.0 Medium
Status
Modified - secalert@redhat.com
Published
2015-02-13
Last modified
2024-08-06
Weaknesses
CWE-200

Affected products

References

 
 
© AVABIS GmbH privacypolicy about