CVE-2016-7061lowCWE-200

CVE-2016-7061

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 1.8%

probabilidade de exploração

1.8%top 23% das CVEs

exploração observada

nãonenhuma fonte reporta

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Produtos afetados

Red Hat · EAP

Referências