CVE-2009-5066

CVE-2009-5066 describes a credential exposure vulnerability in twiddle.sh, affecting JBoss AS 5.0 and EAP 5.0 and earlier versions. This flaw allows local users to read sensitive credentials by listing process arguments, as the script accepts them directly on the command line. With a low CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), this vulnerability requires local access and has a low impact, primarily compromising confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat level.