CVE-2016-7061CWE-200

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4

Low · published September 10, 2018

CVSS v3.0
3.5
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.

The record
Technical detail
CVSS v3.0
3.5 · LOW
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01766 · 77.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2018-09-10T16:00Z
EPSS history
Timeline
  • 10 SEP 16:00Z
    An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4
    cvelistv5