Unscored CVE-2014-8175 EUVD-2014-8016GHSA-75xc-rff6-hh5r

Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveragi…

Published Jul 8, 2015 · Updated Aug 6, 2024 · Assigned by redhat

Description

Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraging an account defined in the users.properties file.

References

RHSA-2015:1176 vendor-advisory
RHSA-2015:1177 vendor-advisory