CVE-2017-12167

5.5 mediumEPSS 0.4%

It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWEs: CWE-200, CWE-732
Published: 2018-07-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:jboss_enterprise_application_platform

References

http://www.securityfocus.com/bid/100903
https://access.redhat.com/errata/RHSA-2017:3454
https://access.redhat.com/errata/RHSA-2017:3455
https://access.redhat.com/errata/RHSA-2017:3456
https://access.redhat.com/errata/RHSA-2017:3458

Check your stack JSON