CVE-2013-0218

published 2013-02-05

CVE-2013-0218: The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for…

low 2.1 CVSS 3.1

AV L AC L Au N C P I N A N

The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for the auto-install XML file, which allows local users to obtain the administrator password and the sucker password by reading this file.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
redhat	jboss_enterprise_application_platform	—	—
redhat	jboss_enterprise_application_platform	—	—
redhat	jboss_enterprise_web_platform	—	—
redhat	jboss_enterprise_web_platform	—	—

CWE-200