Red Hat JBoss Weld CVE-2014-8122 Information Disclosure Vulnerability

Bugtraq ID:	74252
Class:	Design Error
CVE:	CVE-2014-8122
Remote:	Yes
Local:	No
Published:	Apr 21 2015 12:00AM
Updated:	May 12 2015 07:49PM
Credit:	Rune Steinseth of JProfessionals
Vulnerable:
Not Vulnerable:

Red Hat JBoss Weld CVE-2014-8122 Information Disclosure Vulnerability

Red Hat JBoss Weld is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid to perform future attacks.

Red Hat JBoss Weld CVE-2014-8122 Information Disclosure Vulnerability

An attacker can exploit this issue using readily available tools.

Red Hat JBoss Weld CVE-2014-8122 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Red Hat JBoss Weld CVE-2014-8122 Information Disclosure Vulnerability

References:

• CVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread state (Red Hat Bugzilla)
  
• Weld Homepage (Red Hat)
  
• Moderate: Red Hat JBoss Operations Network 3.3.2 update (Red Hat)
  
• Security Advisory Important: Red Hat JBoss BPM Suite 6.1.0 update (Red Hat)
  
• Security Advisory Important: Red Hat JBoss BRMS 6.1.0 update (Red Hat)
  
• Security Advisory Important: Red Hat JBoss Data Grid 6.4.1 update (Red Hat)
  
• Security Advisory Important: Red Hat JBoss Data Virtualization 6.1.0 update (Red Hat)
  
• Security Advisory Moderate: Red Hat JBoss Enterprise Application Platform 6.3.3 (Red Hat)
  
• Security Advisory Moderate: Red Hat JBoss Enterprise Application Platform 6.3.3 (Red Hat)
  
• Security Advisory Moderate: Red Hat JBoss Enterprise Application Platform 6.3.3 (Red Hat)
  
• Security Advisory Moderate: Red Hat JBoss Enterprise Application Platform 6.3.3 (Red Hat)