Security Advisory

CVE-2012-3427

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-02-02 20:00:00
Last updated 2024-08-06 20:05:12
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.