Approved changes feed: RSS · Atom
cpe:2.3:a:red_hat:jboss_eap:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Red Hat (a3686528-5679-55c9-b393-abe45df26bd2) |
|---|---|
| Product | Jboss Eap (93d3ef52-4c35-5da6-a43c-a9d8cd231ef8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-14885 |
vulnerable | 2026-06-08 05:12:56.336295 |
Details available
MEDIUM (5.4)
A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information.
Published: 2020-01-23T00:00:00.000Z
Updated: 2024-08-05T00:26:39.249Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0169 |
vulnerable | 2026-06-08 05:05:12.007268 |
Details available
In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the security domain. This could allow an authenticated user in one application to access protected resources in another application without proper authorization. Although this is an intended functionality, it was not clearly documented which can mislead users into thinking that a security domain cache is isolated to a single application.
Published: 2020-01-02T19:09:51.000Z
Updated: 2024-08-06T09:05:39.132Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.