CVE-2012-0032
low
CVSS v3
—
CVSS v2
3.7
VIR risk
3.7
Description
Red Hat JBoss Operations Network (JON) before 3.0.1 uses 0777 permissions for the root directory when installing a remote client, which allows local users to read or modify subdirectories and files within the root directory, as demonstrated by obtaining JON credentials.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: secalert@redhat.com — http://rhn.redhat.com/errata/RHSA-2012-0406.html
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| redhat | jboss_operations_network | {"endIncluding":"3.0"} | |
References
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.