Vulnerability Details CVE-2016-7043
It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.8%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 5.0
References
Products affected by CVE-2016-7043
-
cpe:2.3:a:redhat:kie-server:*