CVE-2012-3427

EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
VendorProductVersion
redhatjboss_enterprise_application_platform
5.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2012-1376.html
http://secunia.com/advisories/51016
http://www.osvdb.org/86409
http://www.securityfocus.com/bid/55945
https://exchange.xforce.ibmcloud.com/vulnerabilities/79398
http://rhn.redhat.com/errata/RHSA-2012-1376.html
http://secunia.com/advisories/51016
http://www.osvdb.org/86409
http://www.securityfocus.com/bid/55945
https://exchange.xforce.ibmcloud.com/vulnerabilities/79398