What is the severity of CVE-2014-0058?

CVE-2014-0058 is considered a medium severity vulnerability due to the potential exposure of sensitive data in audit logs.

How do I fix CVE-2014-0058?

To fix CVE-2014-0058, upgrade to a patched version of Red Hat JBoss Enterprise Application Platform that addresses the logging of sensitive request parameters.

What versions are affected by CVE-2014-0058?

CVE-2014-0058 affects Red Hat JBoss Enterprise Application Platform versions 6.0.0, 6.0.1, 6.1.0, and 6.2.0.

What type of data could be compromised in CVE-2014-0058?

CVE-2014-0058 could result in the exposure of sensitive data, including passwords used for authentication mechanisms.

Who can exploit CVE-2014-0058?

A local attacker with access to the audit logs could exploit CVE-2014-0058 to compromise application accounts.

Vulnerability/
CVE-2014-0058

low

1.9

CWE

310

11/2/2014

26/2/2014

6/8/2024

CVE-2014-0058

First published: Tue Feb 11 2014(Updated: )

It was identified that web auditing, as provided by Red Hat JBoss Enterprise Application Platform 6, logged request parameters in plain text. This may include passwords used for authentication mechanisms such as BASIC and FORMAUTH. A local attacker, with access to audit logs, could compromise application/server credentials.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
JBoss Enterprise Application Platform	=6.0.0
JBoss Enterprise Application Platform	=6.0.1
JBoss Enterprise Application Platform	=6.1.0
JBoss Enterprise Application Platform	=6.2.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-0058?
CVE-2014-0058 is considered a medium severity vulnerability due to the potential exposure of sensitive data in audit logs.
How do I fix CVE-2014-0058?
To fix CVE-2014-0058, upgrade to a patched version of Red Hat JBoss Enterprise Application Platform that addresses the logging of sensitive request parameters.
What versions are affected by CVE-2014-0058?
CVE-2014-0058 affects Red Hat JBoss Enterprise Application Platform versions 6.0.0, 6.0.1, 6.1.0, and 6.2.0.
What type of data could be compromised in CVE-2014-0058?
CVE-2014-0058 could result in the exposure of sensitive data, including passwords used for authentication mechanisms.
Who can exploit CVE-2014-0058?
A local attacker with access to the audit logs could exploit CVE-2014-0058 to compromise application accounts.

agent/type
agent/first-publish-date
agent/references
collector/mitre-cve
source/MITRE
agent/author
agent/last-modified-date
agent/weakness
agent/severity
agent/description
agent/event
collector/redhat-bugzilla
source/Red Hat
alias/CVE-2014-0058
agent/trending
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/redhat
canonical/jboss enterprise application platform
version/jboss enterprise application platform/6.0.0
version/jboss enterprise application platform/6.0.1
version/jboss enterprise application platform/6.1.0
version/jboss enterprise application platform/6.2.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.