Medium RHSA-2012:1376 1 CVE

Red Hat Security Advisory: jboss-ec2-eap security update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 1

Release	Package	Fixed in
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6	jboss-ec2-eap	0:5.1.2-8.11.ep5.el6

Vulnerabilities 1

Medium 5.5

CVE-2012-3427

Jboss-eap: aws-ec2: jboss eap and aws ec2: information disclosure via incorrect directory permissions

A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read sensitive files. This vulnerability can lead to information …

Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat JBoss Enterprise Application Platform 7 Red Hat JBoss Enterprise Application Platform 8

Feb 2, 2014

References

article
https://access.redhat.com/security/updates/classification/#low
report
https://bugzilla.redhat.com/show_bug.cgi?id=843335
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1376.json
report
https://access.redhat.com/security/cve/CVE-2012-3427
advisory
https://www.cve.org/CVERecord?id=CVE-2012-3427
advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-3427