Lucene search

[email protected]CVE-2010-1429

HistoryApr 28, 2010 - 10:30 p.m.

CVE-2010-1429

2010-04-2822:30:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2010-1429

red hat

jboss eap

information disclosure

security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

JSON

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about “deployed web contexts” via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.

Affected configurations

NVD

Node

redhatjboss_enterprise_application_platformRange≤4.2.0cp08

redhatjboss_enterprise_application_platformRange≤4.3.0cp07

redhatjboss_enterprise_application_platformMatch4.2

redhatjboss_enterprise_application_platformMatch4.2.0cp01

redhatjboss_enterprise_application_platformMatch4.2.0cp02

redhatjboss_enterprise_application_platformMatch4.2.0cp03

redhatjboss_enterprise_application_platformMatch4.2.0cp04

redhatjboss_enterprise_application_platformMatch4.2.0cp05

redhatjboss_enterprise_application_platformMatch4.2.0cp06

redhatjboss_enterprise_application_platformMatch4.2.0cp07

redhatjboss_enterprise_application_platformMatch4.3

redhatjboss_enterprise_application_platformMatch4.3.0cp01

redhatjboss_enterprise_application_platformMatch4.3.0cp02

redhatjboss_enterprise_application_platformMatch4.3.0cp03

redhatjboss_enterprise_application_platformMatch4.3.0cp04

redhatjboss_enterprise_application_platformMatch4.3.0cp05

redhatjboss_enterprise_application_platformMatch4.3.0cp06

CPENameOperatorVersion
redhat:jboss_enterprise_application_platformredhat jboss enterprise application platformle4.2.0
redhat:jboss_enterprise_application_platformredhat jboss enterprise application platformle4.3.0
redhat:jboss_enterprise_application_platformredhat jboss enterprise application platformeq4.2
redhat:jboss_enterprise_application_platformredhat jboss enterprise application platformeq4.3

CPE	Name	Operator	Version
redhat:jboss_enterprise_application_platform	redhat jboss enterprise application platform	le	4.2.0
redhat:jboss_enterprise_application_platform	redhat jboss enterprise application platform	le	4.3.0
redhat:jboss_enterprise_application_platform	redhat jboss enterprise application platform	eq	4.2
redhat:jboss_enterprise_application_platform	redhat jboss enterprise application platform	eq	4.3