Back

LOW

JBoss: twiddle.sh accepts credentials as command line arguments, exposing them to other local users via a process listing

Published Aug 13, 2012

Description

twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

References (20)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Aug 13, 2012
Updated Aug 7, 2024
Reserved Apr 5, 2011
NVD
Status Modified
Modified Jun 16, 2026
Red Hat
Severity Low
Public date Oct 1, 2009