CVE-2014-8175: Red Hat JBoss Fuse

Medium severity, CVSS 6.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraging an account defined in the users.properties file.

Affected products

• Red Hat JBoss Fuse: up to and including 6.1.0

Published 2015-07-08. Last modified 2026-06-17.