CVE-2014-7853

Subsystem: Information disclosure via incorrect sensitivity classification of attribute

Published Feb 13, 2015 CVSS 2.0 · 4.0 Medium EPSS 1.2% KEV · Not listed
Description
The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to the security-domain attribute, which allows remote authenticated users to obtain sensitive information by leveraging access to the security-domain attribute.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-7703 The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to the security-domain attribute, which allows remote authenticated users to obtain sensitive information by leveraging access to the security-domain attribute.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 1:03 PM
Reserved
Oct 3, 2014, 12:00 AM
Status
Modified
Published
Feb 13, 2015, 3:59 PM
Modified
Jun 17, 2026, 12:15 AM
Severity
Moderate
Public date
Feb 11, 2015, 12:00 AM