CVE-2009-5066

JBoss: twiddle.sh accepts credentials as command line arguments, exposing them to other local users via a process listing

Published Aug 13, 2012 CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Description
twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2009-5021 twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 7:24 AM
Reserved
Apr 5, 2011, 12:00 AM
Status
Modified
Published
Aug 13, 2012, 8:55 PM
Modified
Jun 16, 2026, 11:14 PM
Severity
Low
Public date
Oct 1, 2009, 12:00 AM