Red Hat JBoss Operations Network (JON) before 3.0.1 uses 0777 permissions for the root directory when installing a remote client, which allows local users to read or modify subdirectories and files within the root directory, as demonstrated by obtaining JON credentials.
References
Link | Resource |
---|---|
http://rhn.redhat.com/errata/RHSA-2012-0406.html | Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=772514 |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2014-04-01T01:00:00
Updated: 2014-04-01T00:57:00
Reserved: 2011-12-07T00:00:00
Link: CVE-2012-0032
JSON object: View
NVD Information
Status : Analyzed
Published: 2014-04-01T06:35:52.530
Modified: 2014-04-01T14:40:21.477
Link: CVE-2012-0032
JSON object: View
Redhat Information
No data.
CWE