CVE-2012-3427

5.5 mediumEPSS 0.4%

A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read sensitive files. This vulnerability can lead to information disclosure, specifically exposing Amazon Web Services (AWS) credentials.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-30)
CWEs: CWE-276, CWE-264
Published: 2014-02-02
Modified: 2026-10-30
Record from: the NVD, synced 2026-10-30

Affected

redhat:jboss_enterprise_application_platform

References

http://rhn.redhat.com/errata/RHSA-2012-1376.html
http://secunia.com/advisories/51016
http://www.osvdb.org/86409
http://www.securityfocus.com/bid/55945
https://access.redhat.com/errata/RHSA-2012:1376

Check your stack JSON