NetSight
IP …
medium5.0

CVE-2008-3273

JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive informa…

Impact

JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string.

Affected products

VendorProductAffected versions
JbossEnterprise Application Platform
through 4.2.0.cp03
through 4.3.0
Versions 4.2.0.cp01, 4.2.0.cp02

Weakness classification

CWE-264

References