CVE Database
/

CVE-2012-3427

Back to search

CVE-2012-3427

Published: Feb 2, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2012:1376
vendor-advisory
x_refsource_REDHAT
55945
vdb-entry
x_refsource_BID
51016
third-party-advisory
x_refsource_SECUNIA
jbosseap-info-disc(79398)
vdb-entry
x_refsource_XF
86409
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now