JBoss EAP < 4.2.0.CP03 / 4.3.0.CP01 Status Servlet Information Disclosure

2008-08-1500:00:00

Tenable

www.tenable.com

JSON

The version of JBoss Enterprise Application Platform (EAP) running on the remote host allows unauthenticated access to the status servlet, which is used to monitor sessions and requests sent to the server.

Binary data 4623.prm

VendorProductVersionCPE
jbossenterprise_application_platformcpe:/a:jboss:enterprise_application_platform

Vendor	Product	Version	CPE
jboss	enterprise_application_platform		cpe:/a:jboss:enterprise_application_platform

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3273

jira.jboss.com/jira/browse/JBPAPP-544

jira.jboss.com/jira/browse/JBPAPP-544 (login required)

bugzilla.redhat.com/show_bug.cgi?id=457757

JSON