CVE-2017-12167CWE-732

It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are…

Medium · published July 26, 2018

CVSS v3.0
5.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system.

The record
Technical detail
CVSS v3.0
5.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00376 · 30.1th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2018-07-26T17:00Z
EPSS history
Timeline
  • 26 JUL 17:00Z
    It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are…
    cvelistv5