Description

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

Remediation

References

CVE-2013-1921

Related Vulnerabilities

Oracle Database Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-0270)

WordPress Plugin Zingiri Web Shop Cross-Site Scripting (2.4.2)

Apache HTTP Server Resource Management Errors Vulnerability (CVE-2007-6750)

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2017-17485)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4956)

Severity

Low

Classification

CVE-2013-1921

Tags

Missing Update Known Vulnerabilities