CVE-2016-7061lowCWE-200

CVE-2016-7061

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.5epss 1.8%

exploitation probability

1.8%top 23% of all CVEs

observed exploitation

nono source reports it

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Affected products

Red Hat · EAP

References