| Package | Affected versions | Patched versions |
|---|---|---|
| jboss enterprise application platform | = 5.1.2= 5.2.0 | |
| jboss enterprise web platform | = 5.1.2= 5.2.0 |
The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for the auto-install XML file, which allows local users to obtain the administrator password and the sucker password by reading this file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free