Design/Logic Flaw

2020-03-1017:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.2%

JSON

JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.

CPENameOperatorVersion
jboss_application_serverge7.0.0
jboss_application_serverlt7.1.1

CPE	Name	Operator	Version
	jboss_application_server	ge	7.0.0
	jboss_application_server	lt	7.1.1

References

access.redhat.com/security/cve/cve-2012-1094

bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1094