CVE:CVE-2009-3554
CNNVD:CNNVD-200912-198
JBoss企业应用平台(EAP)是J2EE应用的中间件平台。
Red Hat JBoss Enterprise Application Platform Twiddle 中写JMX密码,和twiddle.log文件中其他命令行参数,允许本地用户获得敏感信息从这些文件中.
solution:Upgrade redhat jboss_enterprise_application_platform to a higher version than 4.2,4.2:cp01,4.2:cp02,4.2.0:cp01,4.2.0:cp02,4.2.0:cp03,4.2.0:cp04,4.2.0:cp05,4.2.0:cp06,4.2.0:cp07,4.2.2:ga,and avoid the version 4.2,4.2:cp01,4.2:cp02,4.2.0:cp01,4.2.0:cp02,4.2.0:cp03,4.2.0:cp04,4.2.0:cp05,4.2.0:cp06,4.2.0:cp07,4.2.2:ga