CVE-2013-1921

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-1921
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

1.9 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 3.4 / Impact : 2.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2013-1207.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1208.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1209.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1437.html
http://rhn.redhat.com/errata/RHSA-2014-0029.html
https://bugzilla.redhat.com/show_bug.cgi?id=948106
http://rhn.redhat.com/errata/RHSA-2013-1207.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1208.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1209.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1437.html
http://rhn.redhat.com/errata/RHSA-2014-0029.html
https://bugzilla.redhat.com/show_bug.cgi?id=948106
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.1:*:*:*:*:*:*:*
History

21 Nov 2024, 01:50

Type Values Removed Values Added
References () http://rhn.redhat.com/errata/RHSA-2013-1207.html - Vendor Advisory () http://rhn.redhat.com/errata/RHSA-2013-1207.html - Vendor Advisory
References () http://rhn.redhat.com/errata/RHSA-2013-1208.html - Vendor Advisory () http://rhn.redhat.com/errata/RHSA-2013-1208.html - Vendor Advisory
References () http://rhn.redhat.com/errata/RHSA-2013-1209.html - Vendor Advisory () http://rhn.redhat.com/errata/RHSA-2013-1209.html - Vendor Advisory
References () http://rhn.redhat.com/errata/RHSA-2013-1437.html - () http://rhn.redhat.com/errata/RHSA-2013-1437.html -
References () http://rhn.redhat.com/errata/RHSA-2014-0029.html - () http://rhn.redhat.com/errata/RHSA-2014-0029.html -
References () https://bugzilla.redhat.com/show_bug.cgi?id=948106 - () https://bugzilla.redhat.com/show_bug.cgi?id=948106 -
Information

Published : 2013-09-28 19:55

Updated : 2025-04-11 00:51

NVD link : CVE-2013-1921

Mitre link : CVE-2013-1921

CVE.ORG link : CVE-2013-1921

JSON object : View

Products Affected

redhat

  • jboss_enterprise_application_platform
CWE
CWE-310

Cryptographic Issues