CVEvulnerability
CVE-2010-1429
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-04-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.
Affected configurations
• redhat jboss enterprise application platform (<= 4.2.0)
• redhat jboss enterprise application platform (<= 4.3.0)
• redhat jboss enterprise application platform 4.2
• redhat jboss enterprise application platform 4.2.0
• redhat jboss enterprise application platform 4.3
• redhat jboss enterprise application platform 4.3.0
Related
Weakness · not in database (1)
References
- http://marc.info/?l=bugtraq&m=132698550418872&w=2 marc.info
- http://secunia.com/advisories/39563 Vendor Advisory
- http://securitytracker.com/id?1023918 securitytracker.com
- http://www.securityfocus.com/bid/39710 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0992 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=585900 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58149 exchange.xforce.ibmcloud.com
- https://rhn.redhat.com/errata/RHSA-2010-0376.html Vendor Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0377.html Vendor Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0378.html Vendor Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0379.html Vendor Advisory
- https://www.exploit-db.com/exploits/44009/ www.exploit-db.com
- http://marc.info/?l=bugtraq&m=132698550418872&w=2 marc.info
- http://secunia.com/advisories/39563 Vendor Advisory
- http://securitytracker.com/id?1023918 securitytracker.com
- http://www.securityfocus.com/bid/39710 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0992 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=585900 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58149 exchange.xforce.ibmcloud.com
- https://rhn.redhat.com/errata/RHSA-2010-0376.html Vendor Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0377.html Vendor Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0378.html Vendor Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0379.html Vendor Advisory
- https://www.exploit-db.com/exploits/44009/ www.exploit-db.com