RedHat Security Advisory RHSA-2009:1067

The remote host is missing updates announced in advisory RHSA-2009:1067. Red Hat Application Stack v2.3 is an integrated open source application stack, that includes Red Hat Enterprise Linux 5 and JBoss Enterprise Application Platform EAP. JBoss EAP is provided through the JBoss EAP channels on t...

Moderate: Red Hat Security Advisory: Red Hat Application Stack v2.3 security and enhancement update

Red Hat Application Stack v2.3 is now available. This update fixes several security issues and adds various enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Red Hat Application Stack v2.3 is an integrated open source application...

Design/Logic Flaw

The request handler in JBossWS in JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read...

CVE-2009-0027

The request handler in JBossWS in JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read...

CVE-2009-0027

The request handler in JBossWS in JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read...

CVE-2009-0027

CVE-2009-0027 affects JBossWS in JBoss EAP/JBEAP 4.2 (before 4.2.0.CP06) and 4.3 (before 4.3.0.CP04). The vulnerability arises from improper validation of the resource path when serving WSDL files for custom web-service endpoints, allowing remote attackers to read arbitrary XML files with the EAP...

Moderate: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP04 update

Updated JBoss Enterprise Application Platform JBoss EAP 4.3 packages that fix various issues are now available for Red Hat Enterprise Linux 4 as JBEAP 4.3.0.CP04. This update has been rated as having moderate security impact by the Red Hat Security Response Team. JBoss Enterprise Application...

Moderate: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP06 update

Updated JBoss Enterprise Application Platform JBoss EAP 4.2 packages that fix various issues are now available for Red Hat Enterprise Linux 5 as JBEAP 4.2.0.CP06. This update has been rated as having moderate security impact by the Red Hat Security Response Team. JBoss Enterprise Application...

Moderate: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP04 update

Updated JBoss Enterprise Application Platform JBoss EAP 4.3 packages that fix various issues are now available for Red Hat Enterprise Linux 5 as JBEAP 4.3.0.CP04. This update has been rated as having moderate security impact by the Red Hat Security Response Team. JBoss Enterprise Application...

Moderate: Red Hat Security Advisory: Red Hat Application Stack v2.2 security and enhancement update

Red Hat Application Stack v2.2 is now available. This update fixes several security issues and adds various enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 11th December 2008 This erratum has been updated to correct a typo...

JBoss EAP < 4.2.0.CP04 / 4.3.0.CP02 Status Servlet Information Disclosure

Binary data 4689.prm...

JBossEAP allows download of non-EJB class files

The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform aka JBossEAP or EAP, possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain...

JBoss EAP < 4.2.0.CP03 / 4.3.0.CP01 Status Servlet Information Disclosure

Binary data 4623.prm...

JBoss Enterprise Application Platform (EAP) Status Servlet Request Remote Information Disclosure

The version of JBoss Enterprise Application Platform EAP running on the remote host allows unauthenticated access to a status servlet, which is used to monitor sessions and requests sent to the server. This vulnerability CVE-2008-3273 was fixed in versions 4.2.0.CP03 and 4.3.0.CP01, but was later...

CVE-2008-3273

JBoss Enterprise Application Platform aka JBossEAP or EAP before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string...

Moderate: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP01 security update

Updated JBoss Enterprise Application Platform JBoss EAP packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. JBoss EAP is a middleware platform for Java 2...

Moderate: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP01 security update

Updated JBoss Enterprise Application Platform JBoss EAP packages that fix various security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. JBoss EAP is a middleware platform for Java 2...

Moderate: Red Hat Security Advisory: Red Hat Application Stack v2.1 security and enhancement update

Red Hat Application Stack v2.1 is now available. This update fixes various security issues and adds several enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Red Hat Application Stack is an integrated open source application...

Moderate: Red Hat Security Advisory: Red Hat Application Stack v1.3 security and enhancement update

Red Hat Application Stack v1.3 is now available. This update fixes a security issue and adds several enhancements. This updated has been rated as having moderate security impact by the Red Hat Security Response Team. The Red Hat Application Stack is an integrated open source application stack, an...

Moderate: Red Hat Security Advisory: JBoss Enterprise Application Platform security update

Updated JBoss Enterprise Application Platform packages that fix several security issues and bugs are now available for Red Hat Application Stack v1 and v2. This update has been rated as having moderate security impact by the Red Hat Security Response Team. JBEAP is a middleware platform for Java ...