CVE-2014-8175
Red Hat JBoss Fuse < 6.1.0 - Authenticated Access Control Bypass via users.properties Account
Title source: llmDescription
Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraging an account defined in the users.properties file.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-1176.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-1177.html
Scores
EPSS
0.0148
EPSS Percentile
71.2%
Details
CWE
CWE-264
Status
published
Products (1)
redhat/jboss_fuse
< 6.1.0
Published
Jul 08, 2015
Tracked Since
Feb 18, 2026