CVE-2012-3427

Description

A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read sensitive files. This vulnerability can lead to information disclosure, specifically exposing Amazon Web Services (AWS) credentials.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/79398

https://euvd.enisa.europa.eu/vulnerability/EUVD-2012-3395

https://access.redhat.com/security/cve/CVE-2012-3427

https://access.redhat.com/errata/RHSA-2012:1376

http://www.securityfocus.com/bid/55945

http://www.osvdb.org/86409

http://secunia.com/advisories/51016

http://rhn.redhat.com/errata/RHSA-2012-1376.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS