Vulnerability Details CVE-2016-7043
It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.8%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 5.0
References
Products affected by CVE-2016-7043
-
cpe:2.3:a:redhat:kie-server:*