NetSight
IP …
low2.1

CVE-2009-5066

twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing t…

Impact

twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.

Affected products

VendorProductAffected versions
RedhatJboss Community Application Server
Version 5.0.0
RedhatJboss Enterprise Application Platform
Version 5.0.0

Weakness classification

CWE-255

References