CVE-2008-3273

JBossEAP status servlet info leak

Published Aug 10, 2008 CVSS 2.0 · 5.0 Medium EPSS 47.1% KEV · Not listed
Description
JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 9:28 AM
Reserved
Jul 24, 2008, 12:00 AM
Status
Modified
Published
Aug 10, 2008, 8:41 PM
Modified
Jun 16, 2026, 10:55 PM
Severity
Low
Public date
Aug 5, 2008, 12:00 AM