Vulnerability Description
An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Jboss Enterprise Application Platform | < 7.0.4 |
| Redhat | Enterprise Linux | 6.0 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2017-0170.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0171.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0172.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0173.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0244.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0245.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0246.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0247.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0250.htmlVendor Advisory
- http://www.securityfocus.com/bid/94222Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:3454Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3455Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3456Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3458Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7061Issue TrackingVendor Advisory
FAQ
What is CVE-2016-7061?
CVE-2016-7061 is a vulnerability with a CVSS score of 3.5 (LOW). An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a...
How severe is CVE-2016-7061?
CVE-2016-7061 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-7061?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Jboss Enterprise Application Platform, Redhat Enterprise Linux.