CVE-2014-8175

Published: Jul 8, 2015Modified: May 6, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraging an account defined in the users.properties file.

Affected (1)

Products: Redhat: Jboss Fuse

Redhat

1 product

Jboss Fuse

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Fuse	Up to 6.1.0

Related CWEs

CWE-264

References (4)

http://rhn.redhat.com/errata/RHSA-2015-1176.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1177.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1176.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-1177.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.