Search/CVE-2009-5066
● CVE

CVE-2009-5066

VendorredhatProductjboss enterprise application platform, jboss community application serverDiscoveredAug 13, 2012UpdatedApr 29, 2026

twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.

View graph Watch Export
CVSS v3.1
—
EPSS
0.39%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
3 relationships
Timeline
disclosure → media coverage
Aug 13, 2012
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026