CVE-2016-7043

Description

It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.23

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2016-7043 are fixed in KIE-Server-kie-server-common 7.21.0	Windows
Vulnerabilities CVE-2016-7043 are fixed in KIE-Server-kie-server-common for Linux 7.21.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234