A vulnerability in the platform-mbean component of JBoss EAP allows authenticated users with low-privileged roles, such as Monitor, to bypass Role-Based Access Control (RBAC) checks and view sensitive JVM system properties and configuration details. This flaw arises from a missing RBAC check in the read-resource operation handler on the runtime management resource.