Description

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.

Remediation

References

CVE-2010-1429

Related Vulnerabilities

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10406)

WordPress Plugin Wp-Pro-Quiz Cross-Site Request Forgery (0.37)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Privilege Escalation (2.4.0)

Ruby Resource Management Errors Vulnerability (CVE-2008-2664)

WordPress Plugin Web Application Firewall-website security Unspecified Vulnerability (2.1.2)

Severity

Medium

Classification

CVE-2010-1429 CWE-264

Tags

Missing Update Known Vulnerabilities