CVE-2009-3554

CVE-2009-3554 describes a vulnerability in Red Hat JBoss Enterprise Application Platform (EAP) versions 4.2 prior to 4.2.0.CP08 and 4.3 prior to 4.3.0.CP07. The vulnerability causes the 'twiddle' utility to log JMX passwords and other command-line arguments to the twiddle.log file. This allows local users to gain sensitive information by reading the log file. The CVSS score of 2.1 indicates low severity, with a local attack vector and low complexity, primarily impacting confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.