CVE-2013-3734

The Embedded Jopr component in JBoss Application Server includes the cleartext datasource password in unspecified HTML responses, which might allow (1)…

published October 24, 2017

CVSS
—
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

The Embedded Jopr component in JBoss Application Server includes the cleartext datasource password in unspecified HTML responses, which might allow (1) man-in-the-middle attackers to obtain sensitive information by leveraging failure to use SSL or (2) attackers to obtain sensitive information by reading the HTML source code. NOTE: the vendor says that this does not cross a trust boundary and that it is recommended best-practice that SSL is configured for the administrative console

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01579 · 75.3th percentile
Published
2017-10-24T15:00Z
EPSS history
Timeline
  • 24 OCT 15:00Z
    The Embedded Jopr component in JBoss Application Server includes the cleartext datasource password in unspecified HTML responses, which might allow (1)…
    cvelistv5