CVE-2017-12167

EAP-7: Wrong privileges on multiple property files

Published Jul 26, 2018 CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2017-3743 It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system.
History
Type Values Removed Values Added
CPEs cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7
Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 5, 2024, 6:28 PM
Reserved
Aug 1, 2017, 12:00 AM
Status
Modified
Published
Jul 26, 2018, 5:29 PM
Modified
Jun 17, 2026, 1:02 AM
Severity
Moderate
Public date
Sep 14, 2017, 12:00 AM