NetSight
IP …
low2.1

CVE-2014-3586

The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server…

Impact

The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors.

Affected products

VendorProductAffected versions
RedhatJboss Enterprise Application Platform
through 6.3.3

Weakness classification

CWE-264

References