A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755) for the /var/cache/jboss-ec2-eap/ directory allow a local user to read sensitive files. This vulnerability can lead to information disclosure, specifically exposing Amazon Web Services (AWS) credentials.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 5.5 · red hatNVD modified 2026-10-30 18:03
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 7
- http://rhn.redhat.com/errata/RHSA-2012-1376.html
- http://secunia.com/advisories/51016
- http://www.osvdb.org/86409
- http://www.securityfocus.com/bid/55945
- https://access.redhat.com/errata/RHSA-2012:1376 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/security/cve/CVE-2012-3427 vdb-entry, x_refsource_redhat
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79398