CVE-2017-12167

CVE-2017-12167 describes a vulnerability in Red Hat JBoss Enterprise Application Platform (EAP) versions prior to 7.0.9, where configuration files containing user-to-role mappings were world-readable. This allowed any authenticated user on the system to access sensitive user and role information. With a CVSS score of 5.5 (Medium), this local vulnerability has low attack complexity and requires low privileges, leading to a high impact on confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.