Insecure Permissions in Red Hat JBoss Operations Network (JON) Installation

CVE-2012-0032

Red Hat JBoss Operations Network (JON) before 3.0.1 uses 0777 permissions for the root directory when installing a remote client, which allows local users to read or modify subdirectories and files within the root directory, as demonstrated by obtaining JON credentials.

Learn more about our Network Penetration Testing.