CVE-2009-3554
Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2...
2.1 Low
Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which allows local users to obtain sensitive information by reading this file.
Exploit likelihood
0.38%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which allows local users to obtain sensitive information by reading this file.
- Record
CVE-2009-3554- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which allows local users to obtain sensitive information by reading this file.
- Record
CVE-2009-3554- Updated
- 2026-11-02
EUVDEUVD-2009-3536 No score
Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which allows local users to obtain sensitive information by reading this file.
- Record
EUVD-2009-3536- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p46q-pmw2-55mw No score
Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2...
Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which allows local users to obtain sensitive information by reading this file.
- Record
GHSA-p46q-pmw2-55mw- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.4.2-0jpp.ep1.5.el4 | 0:1.4.2-0jpp.ep1.5.el4 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.1.4-1.12.patch03.ep1.el4 | 0:2.1.4-1.12.patch03.ep1.el4 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.1.4-1.12.patch03.ep1.el4 | 0:2.1.4-1.12.patch03.ep1.el4 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.2_13-2.1.ep1.el4 | 0:1.2_13-2.1.ep1.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
Show 114 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jacorbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.9.el4 | 0:2.3.0-1jpp.ep1.9.el4 |
jakarta-commons-logging-jbossRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.1-9.ep1.el4 | 0:1.1-9.ep1.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.5.5-3.CP04.2.ep1.el4 | 0:1.5.5-3.CP04.2.ep1.el4 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.3.el4 | 0:1.2.1-0jpp.ep1.3.el4 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.4.0-3.SP3_CP09.4.ep1.el4 | 0:1.4.0-3.SP3_CP09.4.ep1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.2.3-3.SP1.ep1.el4 | 0:2.2.3-3.SP1.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 |
jboss-seam2Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.2.FP-1.ep1.21.el4 | 0:2.0.2.FP-1.ep1.21.el4 |
jboss-seam2-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.2.FP-1.ep1.21.el4 | 0:2.0.2.FP-1.ep1.21.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.ep1.el4 | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
jbossas-4.3.0.GA_CP07-binRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.ep1.el4 | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.ep1.el4 | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el4 | 0:2.0.0-6.CP12.0jpp.ep1.2.el4 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.1-4.SP2_CP07.2.ep1.el4 | 0:2.0.1-4.SP2_CP07.2.ep1.el4 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.0-2.GA_CP05.1.ep1.el4 | 0:1.0.0-2.GA_CP05.1.ep1.el4 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.1-1.GA_CP05.1.ep1.el4 | 0:2.0.1-1.GA_CP05.1.ep1.el4 |
jbossws-native42Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.1-4.SP2_CP07.2.ep1.el4 | 0:2.0.1-4.SP2_CP07.2.ep1.el4 |
jcommonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.16-1.1.ep1.el4 | 0:1.0.16-1.1.ep1.el4 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.13-2.3.1.ep1.el4 | 0:1.0.13-2.3.1.ep1.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 1:2.4.7-1.ep1.el4 | 1:2.4.7-1.ep1.el4 |
quartzRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.5.2-1jpp.patch01.ep1.4.el4 | 0:1.5.2-1jpp.patch01.ep1.4.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.ep1.3.el4 | 0:4.3.0-6.GA_CP07.ep1.3.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.ep1.3.el4 | 0:4.3.0-6.GA_CP07.ep1.3.el4 |
xerces-j2Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 | 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.3.0-1.3.patch01.ep1.2.el4 | 0:1.3.0-1.3.patch01.ep1.2.el4 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.4.2-0jpp.ep1.5.el4 | 0:1.4.2-0jpp.ep1.5.el4 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2_13-2.1.ep1.el4 | 0:1.2_13-2.1.ep1.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.9.el4 | 0:2.3.0-1jpp.ep1.9.el4 |
jakarta-commons-logging-jbossRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.1-9.ep1.el4 | 0:1.1-9.ep1.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.5.5-3.CP04.2.ep1.el4 | 0:1.5.5-3.CP04.2.ep1.el4 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.3.el4 | 0:1.2.1-0jpp.ep1.3.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.2.3-3.SP1.ep1.el4 | 0:2.2.3-3.SP1.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.22.el4 | 0:1.2.1-1.ep1.22.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.22.el4 | 0:1.2.1-1.ep1.22.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.ep1.el4 | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
jbossas-4.2.0.GA_CP08-binRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.ep1.el4 | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.ep1.el4 | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el4 | 0:2.0.0-6.CP12.0jpp.ep1.2.el4 |
jcommonRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.16-1.1.ep1.el4 | 0:1.0.16-1.1.ep1.el4 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.13-2.3.1.ep1.el4 | 0:1.0.13-2.3.1.ep1.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:2.4.7-1.ep1.el4 | 1:2.4.7-1.ep1.el4 |
quartzRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.5.2-1jpp.patch01.ep1.4.el4 | 0:1.5.2-1jpp.patch01.ep1.4.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-6.GA_CP08.ep1.3.el4 | 0:4.2.0-6.GA_CP08.ep1.3.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-6.GA_CP08.ep1.3.el4 | 0:4.2.0-6.GA_CP08.ep1.3.el4 |
xerces-j2Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 | 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.3.0-1.3.patch01.ep1.2.el4 | 0:1.3.0-1.3.patch01.ep1.2.el4 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.1.4-1.12.patch03.1.ep1.el5 | 0:2.1.4-1.12.patch03.1.ep1.el5 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.1.4-1.12.patch03.1.ep1.el5 | 0:2.1.4-1.12.patch03.1.ep1.el5 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.2_13-2.1.ep1.el5 | 0:1.2_13-2.1.ep1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
jacorbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.9.1.el5 | 0:2.3.0-1jpp.ep1.9.1.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.5.5-3.CP04.2.ep1.el5 | 0:1.5.5-3.CP04.2.ep1.el5 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.3.el5.1 | 0:1.2.1-0jpp.ep1.3.el5.1 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.4.0-3.SP3_CP09.4.ep1.el5 | 0:1.4.0-3.SP3_CP09.4.ep1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.2.3-3.SP1.ep1.el5 | 0:2.2.3-3.SP1.ep1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 |
jboss-seam2Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.2.FP-1.ep1.18.el5 | 0:2.0.2.FP-1.ep1.18.el5 |
jboss-seam2-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.2.FP-1.ep1.18.el5 | 0:2.0.2.FP-1.ep1.18.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.2.ep1.el5 | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
jbossas-4.3.0.GA_CP07-binRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.2.ep1.el5 | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.2.ep1.el5 | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el5 | 0:2.0.0-6.CP12.0jpp.ep1.2.el5 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 | 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.0-2.GA_CP05.1.ep1.el5 | 0:1.0.0-2.GA_CP05.1.ep1.el5 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.1-1.GA_CP05.1.ep1.el5 | 0:2.0.1-1.GA_CP05.1.ep1.el5 |
jbossws-native42Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 | 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 |
jcommonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.16-1.1.ep1.el5 | 0:1.0.16-1.1.ep1.el5 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.13-2.3.1.ep1.el5 | 0:1.0.13-2.3.1.ep1.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 1:2.4.7-1.ep1.el5 | 1:2.4.7-1.ep1.el5 |
quartzRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.5.2-1jpp.patch01.ep1.4.1.el5 | 0:1.5.2-1jpp.patch01.ep1.4.1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.ep1.3.el5 | 0:4.3.0-6.GA_CP07.ep1.3.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.ep1.3.el5 | 0:4.3.0-6.GA_CP07.ep1.3.el5 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.3.0-1.3.patch01.ep1.2.1.el5 | 0:1.3.0-1.3.patch01.ep1.2.1.el5 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2_13-2.1.ep1.el5 | 0:1.2_13-2.1.ep1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.9.1.el5 | 0:2.3.0-1jpp.ep1.9.1.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.5.5-3.CP04.2.ep1.el5 | 0:1.5.5-3.CP04.2.ep1.el5 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.3.el5.1 | 0:1.2.1-0jpp.ep1.3.el5.1 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.2.3-3.SP1.ep1.el5 | 0:2.2.3-3.SP1.ep1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.14.el5 | 0:1.2.1-1.ep1.14.el5 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.14.el5 | 0:1.2.1-1.ep1.14.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.2.ep1.el5 | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
jbossas-4.2.0.GA_CP08-binRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.2.ep1.el5 | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.2.ep1.el5 | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el5 | 0:2.0.0-6.CP12.0jpp.ep1.2.el5 |
jcommonRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.16-1.1.ep1.el5 | 0:1.0.16-1.1.ep1.el5 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.13-2.3.1.ep1.el5 | 0:1.0.13-2.3.1.ep1.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 1:2.4.7-1.ep1.el5 | 1:2.4.7-1.ep1.el5 |
quartzRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.5.2-1jpp.patch01.ep1.4.1.el5 | 0:1.5.2-1jpp.patch01.ep1.4.1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-6.GA_CP08.ep1.3.el5 | 0:4.2.0-6.GA_CP08.ep1.3.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-6.GA_CP08.ep1.3.el5 | 0:4.2.0-6.GA_CP08.ep1.3.el5 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.3.0-1.3.patch01.ep1.2.1.el5 | 0:1.3.0-1.3.patch01.ep1.2.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3554 is a low vulnerability (CVSS 2.1) in Redhat Jboss Enterprise Application Platform, published December 15, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.
References
securityfocus.com/bid/37276
jira.jboss.org/jira/browse/JBPAPP-2872
exchange.xforce.ibmcloud.com/vulnerabilities/54702
rhn.redhat.com/errata/RHSA-2009-1637.html
secunia.com/advisories/37671
Show 39 moreShow less
redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp08/html-single/Release_Notes/index.html
securitytracker.com/id?1023316
bugzilla.redhat.com/show_bug.cgi?id=539495
nvd.nist.gov/vuln/detail/CVE-2009-3554
github.com/advisories/GHSA-p46q-pmw2-55mw
access.redhat.com/errata/RHSA-2009:1636
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1636.json
cve.org/CVERecord?id=CVE-2009-0217