Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:23991
HistoryApr 10, 2020 - 12:42 a.m.

Information Disclosure

2020-04-1000:42:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

jboss EAP is vulnerable to information disclosure. The RHSA-2008:0826 update fixed an issue (CVE-2008-3273) where unauthenticated users were able to access the status servlet; however, a bug fix included in the RHSA-2009:0347 update re-introduced the issue. A remote attacker could use this flaw to acquire details about deployed web contexts.

Related

prion 3
nessus 11
nuclei 1
openvas 2
cve 3
securityvulns 4
redhat 2
seebug 2
ubuntucve 1
packetstorm 1
veracode 1
zdt 1
exploitdb 1
prion
prion
Design/Logic Flaw
2010-04-28 22:30:00
Input validation
2008-08-10 20:41:00
Default configuration
2008-09-23 15:24:00
nessus
nessus
JBoss Enterprise Application Platform (EAP) Status Servlet Request Remote Information Disclosure
2008-08-13 00:00:00
RHEL 4 : JBoss EAP (RHSA-2010:0377)
2013-01-24 00:00:00
RHEL 5 : JBoss EAP (RHSA-2010:0378)
2013-01-24 00:00:00
nuclei
nuclei
Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure
2023-01-18 06:55:26
openvas
openvas
Red Hat JBoss Products Multiple Vulnerabilities (status page) - Active Check
2011-09-16 00:00:00
Red Hat JBoss Products Multiple Vulnerabilities (jmx-console) - Active Check
2010-04-28 00:00:00
cve
cve
CVE-2010-1429
2010-04-28 22:30:00
CVE-2008-3273
2008-08-10 20:41:00
CVE-2008-3519
2008-09-23 15:24:00
securityvulns
securityvulns
Business Availability Center / Business Service Management information leakage
2012-01-21 00:00:00
[security bulletin] HPSBMU02736 SSRT100699 rev.1 - HP Business Availability Center (BAC) and Business Service Management (BSM), Remote Unauthorized Access to Sensitive Information
2012-01-21 00:00:00
[security bulletin] HPSBMU02894 rev.1 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Denial of Service (DoS), Unauthorized Access, Execution of Arbitrary Code
2013-07-29 00:00:00
redhat
redhat
(RHSA-2010:0379) Critical: JBoss Enterprise Application Platform 4.3.0.CP08 update
2010-04-27 00:00:00
(RHSA-2008:0828) Moderate: JBoss Enterprise Application Platform 4.3.0CP01 security update
2008-08-05 00:00:00
seebug
seebug
JBoss企业应用平台多个非授权访问漏洞
2010-04-29 00:00:00
JBoss Enterprise Application Platform信息泄漏漏洞
2008-08-06 00:00:00
ubuntucve
ubuntucve
CVE-2008-3273
2008-08-10 00:00:00
packetstorm
packetstorm
JBoss 4.2.x / 4.3.x Information Disclosure
2018-02-09 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:26:36
zdt
zdt
JBoss 4.2.x/4.3.x - Information Disclosure Exploit
2018-02-10 00:00:00
exploitdb
exploitdb
JBoss 4.2.x/4.3.x - Information Disclosure
2018-02-10 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON
Related for VERACODE:23991
prion3nessus11nuclei1openvas2cve3securityvulns4redhat2seebug2ubuntucve1packetstorm1veracode1zdt1exploitdb1