CVE-2013-3734

The CVE-2013-3734 vulnerability affects the Embedded Jopr component of JBoss Application Server, where the cleartext datasource password is included in unspecified HTML responses. Root cause: passwords are exposed in later responses (even if masked in the UI) or in the HTML source, enabling infor...

Red Hat JBoss Application Server 密码信息泄露漏洞(CVE-2013-3734)

CVE-2013-3734 Red Hat JBoss Application Server（也称WildFly）是美国红帽（Red Hat）公司的一款基于JavaEE的开源的应用服务器。具有启动超快、轻量、模块化设计、热部署和并行部署、简洁管理、域管理及第一类元件等特性 Red Hat JBoss Application Server 1.2及之前的版本中存在信息泄露漏洞。攻击者可利用该漏洞获得敏感信息，有助于发起进一步攻击。 0 Red Hat JBoss Application Server...

JBoss AS Administrative Console Password Disclosure

Product: Embedded Jopr - JBoss AS Administration Console Vendor: Red Hat Middleware, LLC Version: JBoss AS Resources Datasources 2. Select Datasource 3. View page source 4. Find input type="password" 5. "value=" will contain the database password. 6. Dump database. Vendor Notified: Yes Vendor...