Published: 28/09/2013 Updated: 08/03/2014

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

VMScore: 169

Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

Subscribe to Jboss Enterprise Application Platform

PicketBox, as used in Red Hat JBoss Enterprise Application Platform prior to 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat jboss enterprise application platform 5.1.2
redhat jboss enterprise application platform 5.1.1
redhat jboss enterprise application platform 6.0.0
redhat jboss enterprise application platform 5.2.2
redhat jboss enterprise application platform 5.0.0
redhat jboss enterprise application platform 4.3.0
redhat jboss enterprise application platform 5.2.1
redhat jboss enterprise application platform 5.2.0
redhat jboss enterprise application platform 4.2.0
redhat jboss enterprise application platform
redhat jboss enterprise application platform 6.0.1
redhat jboss enterprise application platform 5.1.0
redhat jboss enterprise application platform 5.0.1

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 611 update Type/Severity Security Advisory: Moderate Topic Red Hat JBoss Enterprise Application Platform 611, which fixes multiplesecurity issues, various bugs, and adds enhancements, is now available forRed Hat Enterprise Linux 6The Red ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 611 update Type/Severity Security Advisory: Moderate Topic Red Hat JBoss Enterprise Application Platform 611, which fixes multiplesecurity issues, various bugs, and adds enhancements, is now available forRed Hat Enterprise Linux 5The Red ...

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 611, allows local users to obtain the admin encryption key by reading the Vault data file ...

CWE-310 https://bugzilla.redhat.com/show_bug.cgi?id=948106 http://rhn.redhat.com/errata/RHSA-2013-1207.html http://rhn.redhat.com/errata/RHSA-2013-1208.html http://rhn.redhat.com/errata/RHSA-2013-1209.html http://rhn.redhat.com/errata/RHSA-2013-1437.html http://rhn.redhat.com/errata/RHSA-2014-0029.html https://access.redhat.com/errata/RHSA-2013:1208 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-1921

CVE-2013-1921

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect