CVE-2014-3586: The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before...

Security readout for executives and security teams

This is a local information-disclosure issue in JBoss/Red Hat application server administration tooling. The CLI history file could be created with weak permissions, letting local users read sensitive commands or values previously entered by administrators. Exposure is most likely on servers where affected JBoss EAP or WildFly CLI tooling was used by administrators and untrusted local users have shell access. Treat this as a targeted cleanup and hardening issue, not an emergency remote compromise. Prioritize multi-user administrative servers and systems where secrets may have been typed into the CLI. Mitigation focus: Review and apply the relevant Red Hat RHSA advisories for supported fixed packages.; Upgrade affected Red Hat Enterprise Application Platform deployments to 6.4.0 or later where applicable.; Check WildFly vendor guidance for affected versions and corrected configuration behavior..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.