Back

LOW

PicketBox: Insecure storage of masked passwords

Published Sep 28, 2013

Description

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

References (10)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Sep 28, 2013
Updated Aug 6, 2024
Reserved Feb 19, 2013
NVD
Status Modified
Modified Jun 16, 2026
Red Hat
Severity Low
Public date Sep 4, 2013
ENISA EUVD
Assigner redhat
Published Sep 28, 2013
Updated Aug 6, 2024
Exploited since n/a
EUVD-2013-1915