NetSight
IP …
low3.5

CVE-2016-7061

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4.

Impact

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.

Affected products

VendorProductAffected versions
RedhatJboss Enterprise Application Platform
before 7.0.4

Weakness classification

CWE-200

References