CVE-2014-0085
redhat: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in org.jboss.fuse:jboss-fuse 6.1.0.
JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been updated; previous text mistakenly identified the source of the flaw as Zookeeper. Previous text: Apache Zookeeper logs cleartext admin passwords, which allows local users to obtain sensitive information by reading the log.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
- CWE
- CWE-255
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:jboss_a-mq
- redhat:jboss_fuse
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-h259-3rjg-5qp3 | Maven | org.jboss.fuse:jboss-fuse | <6.1.0 | 6.1.0 |