6 matches found
Subsystem: Information disclosure via incorrect sensitivity classification of attribute
It was discovered that the JBoss Application Server WildFly JacORB subsystem incorrectly assigned socket-binding-ref sensitivity classification for the security-domain attribute. An authenticated user with a role that has access to attributes with socket-binding-ref and not security-domain-ref...
PT-2015-3933
Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP versions prior to 6.3.3 Description The issue affects the JBoss Application Server WildFly JacORB subsystem, where it fails to properly assign socket-binding-ref sensitivity classification to t...
CVE-2014-7853: Exposure of Sensitive Information to an Unauthorized Actor
The JBoss Application Server WildFly JacORB subsystem in Red Hat JBoss Enterprise Application Platform EAP before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to the security-domain attribute, which allows remote authenticated users to obtain sensitive information ...
Subsystem: Information disclosure via incorrect sensitivity classification of attribute
It was discovered that the JBoss Application Server WildFly JacORB subsystem incorrectly assigned socket-binding-ref sensitivity classification for the security-domain attribute. An authenticated user with a role that has access to attributes with socket-binding-ref and not security-domain-ref...
Subsystem: Information disclosure via incorrect sensitivity classification of attribute
It was discovered that the JBoss Application Server WildFly JacORB subsystem incorrectly assigned socket-binding-ref sensitivity classification for the security-domain attribute. An authenticated user with a role that has access to attributes with socket-binding-ref and not security-domain-ref...
Subsystem: Information disclosure via incorrect sensitivity classification of attribute
It was discovered that the JBoss Application Server WildFly JacORB subsystem incorrectly assigned socket-binding-ref sensitivity classification for the security-domain attribute. An authenticated user with a role that has access to attributes with socket-binding-ref and not security-domain-ref...