Information Disclosure

2019-05-0206:38:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.005 Low

EPSS

Percentile

76.4%

JSON

Red Hat JBoss Enterprise Application Platform is vulnerable to information disclosure. GET request which results in a 302 redirect, and when the request header ‘Host’ field was not set, the response header field ‘Location’ contains the internal IP address of the server. A remote attacker could use this to access unauthorized data.

CPENameOperatorVersion
eap7-wss4jeq2.1.4__1.redhat_1.1.ep7.el7
eap7-wss4jeq2.1.7__2.redhat_1.1.ep7.el6
eap7-wss4jeq2.1.4__1.redhat_1.1.ep7.el6
eap7-wss4jeq2.1.8__2.redhat_1.1.ep7.el6
eap7-wss4jeq2.1.7__2.redhat_1.1.ep7.el7
eap7-wss4jeq2.1.5__1.redhat_1.1.ep7.el7
eap7-wss4jeq2.1.8__2.redhat_1.1.ep7.el7
eap7-wss4jeq2.1.5__1.redhat_1.1.ep7.el6
eap7-apache-commons-beanutilseq1.9.2__1.redhat_1.1.ep7.el7
eap7-apache-commons-beanutilseq1.9.2__1.redhat_1.1.ep7.el6

Name	Operator	Version
eap7-wss4j	eq	2.1.4__1.redhat_1.1.ep7.el7
eap7-wss4j	eq	2.1.7__2.redhat_1.1.ep7.el6
eap7-wss4j	eq	2.1.4__1.redhat_1.1.ep7.el6
eap7-wss4j	eq	2.1.8__2.redhat_1.1.ep7.el6
eap7-wss4j	eq	2.1.7__2.redhat_1.1.ep7.el7
eap7-wss4j	eq	2.1.5__1.redhat_1.1.ep7.el7
eap7-wss4j	eq	2.1.8__2.redhat_1.1.ep7.el7
eap7-wss4j	eq	2.1.5__1.redhat_1.1.ep7.el6
eap7-apache-commons-beanutils	eq	1.9.2__1.redhat_1.1.ep7.el7
eap7-apache-commons-beanutils	eq	1.9.2__1.redhat_1.1.ep7.el6