Vulnerability in Redhat Jboss Community Application Server

CVE-2009-5066

twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.

EPSS: 0.004 (31.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References