CVEvulnerability
CVE-2008-3273
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-08-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string.
Affected configurations
• jboss enterprise application platform (<= 4.2.0.cp03)
• jboss enterprise application platform (<= 4.3.0)
• jboss enterprise application platform 4.2.0.cp01
• jboss enterprise application platform 4.2.0.cp02
Related
Weakness · not in database (1)
References
- http://marc.info/?l=bugtraq&m=132698550418872&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2008-0825.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2008-0826.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2008-0827.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2008-0828.html rhn.redhat.com
- http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html www.redhat.com
- http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/ www.redhat.com
- http://www.securityfocus.com/bid/30540 www.securityfocus.com
- http://www.securitytracker.com/id?1020628 www.securitytracker.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=457757 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44235 exchange.xforce.ibmcloud.com
- https://jira.jboss.org/jira/browse/JBPAPP-544 jira.jboss.org
- http://marc.info/?l=bugtraq&m=132698550418872&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2008-0825.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2008-0826.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2008-0827.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2008-0828.html rhn.redhat.com
- http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html www.redhat.com
- http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/ www.redhat.com
- http://www.securityfocus.com/bid/30540 www.securityfocus.com
- http://www.securitytracker.com/id?1020628 www.securitytracker.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=457757 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44235 exchange.xforce.ibmcloud.com
- https://jira.jboss.org/jira/browse/JBPAPP-544 jira.jboss.org