CVE-2013-1921

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
1.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
VendorProductVersion
redhatjboss_enterprise_application_platform
𝑥
≤ 6.1.0
redhatjboss_enterprise_application_platform
4.2.0
redhatjboss_enterprise_application_platform
4.3.0
redhatjboss_enterprise_application_platform
5.0.0
redhatjboss_enterprise_application_platform
5.0.1
redhatjboss_enterprise_application_platform
5.1.0
redhatjboss_enterprise_application_platform
5.1.1
redhatjboss_enterprise_application_platform
5.1.2
redhatjboss_enterprise_application_platform
5.2.0
redhatjboss_enterprise_application_platform
5.2.1
redhatjboss_enterprise_application_platform
5.2.2
redhatjboss_enterprise_application_platform
6.0.0
redhatjboss_enterprise_application_platform
6.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration