CVE-2014-0059: Red Hat JBoss Enterprise Application Platform

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2.3, use world-readable permissions on audit.log, which allows local users to obtain sensitive information by reading this file.

Affected products

• Red Hat JBoss Enterprise Application Platform: up to and including 6.2.2

Published 2014-11-17. Last modified 2026-06-17.