Vulnerabilities (CVE)

Filtered by vendor Redhat Subscribe

Filtered by product Jboss Community Application Server

CVSS v3 Filter

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Search

Total 2 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2009-5066	1 Redhat	2 Jboss Community Application Server, Jboss Enterprise Application Platform	2015-01-18	2.1 LOW	N/A
twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.
CVE-2012-4529	1 Redhat	2 Jboss Community Application Server, Jboss Enterprise Application Platform	2013-10-30	4.3 MEDIUM	N/A
The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.