← Back

CVE-2016-7043

nvd nist
Published: May 15, 2019Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services.

Affected (1)

Products: Redhat: Kie Server
Redhat
1 product
Kie Server
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Kie Server
Before 7.21.0

Related CWEs

CWE-255
CWE-255
CWE-260
Password in Configuration File
The product stores a password in a configuration file that might be accessible to actors who do not know the password.

References (4)

Source: secalert@redhat.com
Issue TrackingThird Party Advisory
Source: secalert@redhat.com
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.