Information Disclosure

2020-04-1000:26:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

JBoss EAP is vulnerable to Information Disclosure. Authenticated users were able to access the status servlet, which could allow remote attackers to acquire details about deployed web contexts.

CPENameOperatorVersion
cglibeq2.1.3__2jpp.ep1.3.el5.1
jfreecharteq0.9.21__2jpp.el4ep1.1
jfreecharteq1.0.9__1jpp.ep1.2.el5.1
jfreecharteq0.9.21__2jpp.ep1.1.el5.2
jfreecharteq1.0.9__1jpp.ep1.2.el4
glassfish-jsfeq1.2_04__1.p02.0jpp.ep1.18.el5
glassfish-jsfeq1.2_10__0jpp.ep1.5.ep5.el4
glassfish-jsfeq1.2_10__0jpp.ep1.5.ep5.el5
jboss-aopeq1.5.5__0jpp.ep1.2.el5.1
jbossxbeq1.0.0__0jpp.ep1.1.el5.1

Name	Operator	Version
cglib	eq	2.1.3__2jpp.ep1.3.el5.1
jfreechart	eq	0.9.21__2jpp.el4ep1.1
jfreechart	eq	1.0.9__1jpp.ep1.2.el5.1
jfreechart	eq	0.9.21__2jpp.ep1.1.el5.2
jfreechart	eq	1.0.9__1jpp.ep1.2.el4
glassfish-jsf	eq	1.2_04__1.p02.0jpp.ep1.18.el5
glassfish-jsf	eq	1.2_10__0jpp.ep1.5.ep5.el4
glassfish-jsf	eq	1.2_10__0jpp.ep1.5.ep5.el5
jboss-aop	eq	1.5.5__0jpp.ep1.2.el5.1
jbossxb	eq	1.0.0__0jpp.ep1.1.el5.1