CVE-2013-1921

Published: Sep 28, 2013Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

Affected (13)

Products: Redhat: Jboss Enterprise Application Platform

Redhat

1 product

Jboss Enterprise Application Platform

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Application Platform	Up to 6.1.0
Redhat Jboss Enterprise Application Platform	Version 4.2.0
Redhat Jboss Enterprise Application Platform	Version 4.3.0
Redhat Jboss Enterprise Application Platform	Version 5.0.0
Redhat Jboss Enterprise Application Platform	Version 5.0.1
Redhat Jboss Enterprise Application Platform	Version 5.1.0
Redhat Jboss Enterprise Application Platform	Version 5.1.1
Redhat Jboss Enterprise Application Platform	Version 5.1.2
Redhat Jboss Enterprise Application Platform	Version 5.2.0
Redhat Jboss Enterprise Application Platform	Version 5.2.1
Redhat Jboss Enterprise Application Platform	Version 5.2.2
Redhat Jboss Enterprise Application Platform	Version 6.0.0
Redhat Jboss Enterprise Application Platform	Version 6.0.1