Information Disclosure

2020-04-1000:26:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.005 Low

EPSS

Percentile

77.2%

JSON

JBoss EAP is vulnerable to Information Disclosure. Authenticated users were able to access the status servlet, which could allow remote attackers to acquire details about deployed web contexts.

CPENameOperatorVersion
cglibeq2.1.3__2jpp.ep1.3.el5.1
jfreecharteq0.9.21__2jpp.el4ep1.1
jfreecharteq1.0.9__1jpp.ep1.2.el5.1
jfreecharteq0.9.21__2jpp.ep1.1.el5.2
jfreecharteq1.0.9__1jpp.ep1.2.el4
glassfish-jsfeq1.2_04__1.p02.0jpp.ep1.18.el5
glassfish-jsfeq1.2_10__0jpp.ep1.5.ep5.el4
glassfish-jsfeq1.2_10__0jpp.ep1.5.ep5.el5
jboss-aopeq1.5.5__0jpp.ep1.2.el5.1
jbossxbeq1.0.0__0jpp.ep1.1.el5.1

Name	Operator	Version
cglib	eq	2.1.3__2jpp.ep1.3.el5.1
jfreechart	eq	0.9.21__2jpp.el4ep1.1
jfreechart	eq	1.0.9__1jpp.ep1.2.el5.1
jfreechart	eq	0.9.21__2jpp.ep1.1.el5.2
jfreechart	eq	1.0.9__1jpp.ep1.2.el4
glassfish-jsf	eq	1.2_04__1.p02.0jpp.ep1.18.el5
glassfish-jsf	eq	1.2_10__0jpp.ep1.5.ep5.el4
glassfish-jsf	eq	1.2_10__0jpp.ep1.5.ep5.el5
jboss-aop	eq	1.5.5__0jpp.ep1.2.el5.1
jbossxb	eq	1.0.0__0jpp.ep1.1.el5.1