Lucene search
PRIOn knowledge basePRION:CVE-2014-7853HistoryFeb 13, 2015 - 3:59 p.m.
Design/Logic Flaw
2015-02-1315:59:00
PRIOn knowledge base
www.prio-n.com
3
The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to the security-domain attribute, which allows remote authenticated users to obtain sensitive information by leveraging access to the security-domain attribute.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jboss_enterprise_application_platform | le | 6.3.2 | |
| jboss_operations_network | eq | 3.3.1 |
References
Related
cvelist
cvelist
CVE-2014-7853
2015-02-13 15:00:00
veracode
veracode
Information Disclosure
2019-05-02 05:08:18
cve
cve
CVE-2014-7853
2015-02-13 15:59:06
nvd
nvd
CVE-2014-7853
2015-02-13 15:59:06
redhat
redhat
nessus
nessus
RHEL 5 : Red Hat JBoss Enterprise Application Platform 6.3.3 update (Moderate) (RHSA-2015:0216)
2015-02-13 00:00:00
RHEL 6 : JBoss EAP (RHSA-2015:0217)
2015-02-13 00:00:00
RHEL 7 : JBoss EAP (RHSA-2015:0218)
2015-09-01 00:00:00