Sensitive Information Disclosure in JBoss EAP 5.1.2 AMI due to Insecure Permissions

CVE-2012-3427

EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory.

Learn more about our Cis Benchmark Audit For Amazon Web Services.