CVE-2009-5066
redhat: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.
twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
- CWE
- CWE-255
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:jboss_community_application_server
- redhat:jboss_enterprise_application_platform