NetSight
IP …
low2.1

CVE-2013-0218

The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for…

Impact

The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for the auto-install XML file, which allows local users to obtain the administrator password and the sucker password by reading this file.

Affected products

VendorProductAffected versions
RedhatJboss Enterprise Application Platform
Versions 5.1.2, 5.2.0
RedhatJboss Enterprise Web Platform
Versions 5.1.2, 5.2.0

Weakness classification

CWE-200

References