Description

The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors.

Remediation

References

CVE-2014-3586

Related Vulnerabilities

WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (5.6.1)

WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Multiple Vulnerabilities (1.5.2)

WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Cross-Site Scripting (9.7.1)

Oracle Database Server CVE-2012-3220 Vulnerability (CVE-2012-3220)

WordPress 'admin-ajax.php' SQL Injection Vulnerability (2.1.3)

Severity

Low

Classification

CVE-2014-3586 CWE-264

Tags

Missing Update Known Vulnerabilities