5

CVE-2010-1429

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string.  NOTE: this issue exists because of a CVE-2008-3273 regression.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Jboss Enterprise Application Platform Update cp08 Version <= 4.2.0
Redhat ≫ Jboss Enterprise Application Platform Update cp07 Version <= 4.3.0
Redhat ≫ Jboss Enterprise Application Platform Version 4.2.0 Update cp01
Redhat ≫ Jboss Enterprise Application Platform Version 4.2.0 Update cp02
Redhat ≫ Jboss Enterprise Application Platform Version 4.2.0 Update cp03
Redhat ≫ Jboss Enterprise Application Platform Version 4.2.0 Update cp04
Redhat ≫ Jboss Enterprise Application Platform Version 4.2.0 Update cp05
Redhat ≫ Jboss Enterprise Application Platform Version 4.2.0 Update cp06
Redhat ≫ Jboss Enterprise Application Platform Version 4.2.0 Update cp07
Redhat ≫ Jboss Enterprise Application Platform Version 4.3.0 Update cp01
Redhat ≫ Jboss Enterprise Application Platform Version 4.3.0 Update cp02
Redhat ≫ Jboss Enterprise Application Platform Version 4.3.0 Update cp03
Redhat ≫ Jboss Enterprise Application Platform Version 4.3.0 Update cp04
Redhat ≫ Jboss Enterprise Application Platform Version 4.3.0 Update cp05
Redhat ≫ Jboss Enterprise Application Platform Version 4.3.0 Update cp06
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 53.73% 0.989
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=132698550418872&w=2
http://secunia.com/advisories/39563
Vendor Advisory
http://securitytracker.com/id?1023918
http://www.securityfocus.com/bid/39710
http://www.vupen.com/english/advisories/2010/0992
Vendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0376.html
Vendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0377.html
Vendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0378.html
Vendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0379.html
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=585900
https://exchange.xforce.ibmcloud.com/vulnerabilities/58149
https://www.exploit-db.com/exploits/44009/