World readable audit.log file ----------------------------- Key: WFCORE-885 URL: https://issues.jboss.org/browse/WFCORE-885 Project: WildFly Core Issue Type: Bug Components: Domain Management Affects Versions: 2.0.0.Beta2 Reporter: Ondrej Lukas Assignee: Ivo Studensky Priority: Blocker Fix For: 2.0.0.Beta6 Server logs sensitive information into a world readable audit.log file. This information could be used by a local attacker to gain otherwise protected information about user sessions etc. This issue was originally reported as CVE in https://bugzilla.redhat.com/show_bug.cgi?id=1063642. EAP 6.x branches are fixed but same issue occurs in EAP 7 again.