| Package | Affected versions | Patched versions |
|---|---|---|
| jboss community application server | = 5.0.0 | |
| jboss enterprise application platform | = 5.0.0 |
twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free