CVE-2014-0058
Fixed in a distro release EPSS <1%
The security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files.
Products: redhat jboss_enterprise_application_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 6 | jboss-as-web | 0:7.3.1-4.Final_redhat_4.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jboss-as-web | 0:7.3.1-4.Final_redhat_4.1.ep6.el6 |