Skip to content
fr Sign in
3.5 Low

CVE-2016-7061 An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4

Description

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.

Affected products and versions

Product Affected versions Fixed in
EAP 7.0.4 No fix stated

References

Timeline

  1. Published
  2. Last modified
Track this CVE