REDHAT-BUG-1126687: Low severity red hat jboss enterprise application platform vulnerability
It was identified that the Command Line Interface, as provided by Red Hat Enterprise Application Platform and WildFly (previously JBoss Application Server), created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not accessible.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1126687?
The severity of REDHAT-BUG-1126687 is considered moderate due to the potential for sensitive information to be exposed.
How do I fix REDHAT-BUG-1126687?
To fix REDHAT-BUG-1126687, change the permissions of the .jboss-cli-history file to ensure it is not readable by unauthorized users.
Which products are affected by REDHAT-BUG-1126687?
REDHAT-BUG-1126687 affects Red Hat Enterprise Application Platform and WildFly.
How can I mitigate the risks of REDHAT-BUG-1126687?
Mitigation strategies for REDHAT-BUG-1126687 include regularly reviewing file permissions and securing sensitive information.
What could exploitation of REDHAT-BUG-1126687 lead to?
Exploitation of REDHAT-BUG-1126687 could lead to unauthorized access to command historical data that may contain sensitive information.