Home > Vulnerability Database > CVE-2013-1921

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2013-1921

Good to know:

Date: September 28, 2013

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.

Language: Java

Severity Score

2.9

Related Resources (8)

Url: https://bugzilla.redhat.com/show_bug.cgi?id=948106

Url: http://rhn.redhat.com/errata/RHSA-2013-1207.html

Url: http://rhn.redhat.com/errata/RHSA-2014-0029.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-1921

Url: http://rhn.redhat.com/errata/RHSA-2013-1208.html

Url: http://rhn.redhat.com/errata/RHSA-2013-1209.html

Url: http://rhn.redhat.com/errata/RHSA-2013-1437.html

Url: https://www.mend.io/vulnerability-database/CVE-2013-1921

Severity Score

2.9

Weakness Type (CWE)

Cryptographic Issues

CWE-310

Top Fix

Upgrade Version

Upgrade to version 6.1.1

CVSS v3.1

Base Score:	2.9
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	1.9
Access Vector (AV):	LOCAL
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us