cbcvebase.
CVE-2013-1921
published 2013-09-28

CVE-2013-1921: PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault…

PriorityP45low1.9CVSS 2.0
AVLACMAuNCPINAN
EPSS
0.24%
15.0th percentile
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

Affected

13 ranges
VendorProductVersion rangeFixed in
redhatjboss_enterprise_application_platform<= 6.1.0—
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——
redhatjboss_enterprise_application_platform——

CVSS provenance

nvdv2.01.9LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
vendor_redhat1.9LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.