CVE-2014-0085

CVE-2014-0085 affects JBoss Fuse where the application’s usage of Apache Zookeeper did not have passwords encrypted by default, enabling sensitive information disclosure via local-access logs. The vulnerability is an information disclosure flaw: a local user who can access the log files could obt...

Moderate: Red Hat Security Advisory: Red Hat JBoss Fuse 6.1.0 update

Red Hat JBoss Fuse 6.1.0, which fixes multiple security issues, several bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS bas...