CVE-2016-7061

EAP: Sensitive data can be exposed at the server level in domain mode

Published Sep 10, 2018 CVSS 3.0 · 3.5 Low EPSS 1.8% KEV · Not listed
Description
An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2016-7941 An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.
History
Type Values Removed Values Added
CPEs cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7
Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 1:50 AM
Reserved
Aug 23, 2016, 12:00 AM
Status
Modified
Published
Sep 10, 2018, 4:29 PM
Modified
Jun 17, 2026, 12:52 AM
Severity
Low
Public date
Nov 7, 2016, 12:00 AM