CVE-2016-7061 — Sensitive Information Exposure in Redhat Jboss Enterprise Application Platform

CWE-200 — Sensitive Information Exposure5 documents5 sources
Severity
6.5MEDIUMNVD
CNA3.5
EPSS
0.6%
top 31.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat Jboss Enterprise Application PlatformRED HAT EAP
Timeline
PublishedSep 10
Latest updateMay 13

Description

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5red_hat/eap7.0.4

🔴Vulnerability Details

2
GHSA
GHSA-35gg-hfjv-3g6c: An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7↗2022-05-13
▶
CVEList
CVE-2016-7061: An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7↗2018-09-10
▶

📋Vendor Advisories

1
Red Hat
EAP: Sensitive data can be exposed at the server level in domain mode↗2016-11-07
▶

💬Community

1
Bugzilla
CVE-2016-7061 EAP: Sensitive data can be exposed at the server level in domain mode↗2016-09-30
▶
CVE-2016-7061 — Sensitive Information Exposure | cvebase