CVE-2014-7853: Infoleak
The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to the security-domain attribute, which allows remote authenticated users to obtain sensitive information by leveraging access to the security-domain attribute.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7853?
CVE-2014-7853 is rated as a high severity vulnerability that could allow remote authenticated users to access sensitive information.
How do I fix CVE-2014-7853?
To fix CVE-2014-7853, upgrade to Red Hat JBoss Enterprise Application Platform version 6.3.3 or later.
What software is affected by CVE-2014-7853?
CVE-2014-7853 affects Red Hat JBoss Operations Network version 3.3.1 and Red Hat JBoss Enterprise Application Platform versions up to 6.3.2.
What impact does CVE-2014-7853 have on my system?
CVE-2014-7853 allows remote authenticated users to potentially gain access to sensitive data, posing a risk to system security.
Is there a workaround for CVE-2014-7853?
There are no documented workarounds for CVE-2014-7853; the recommended action is to apply the appropriate upgrade.