CVE-2017-12167

Description

It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12167

https://access.redhat.com/errata/RHSA-2018:0005

https://access.redhat.com/errata/RHSA-2018:0004

https://access.redhat.com/errata/RHSA-2018:0003

https://access.redhat.com/errata/RHSA-2018:0002

https://access.redhat.com/errata/RHSA-2017:3458

https://access.redhat.com/errata/RHSA-2017:3456

https://access.redhat.com/errata/RHSA-2017:3455

https://access.redhat.com/errata/RHSA-2017:3454

http://www.securityfocus.com/bid/100903

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3