JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2008-08-10T20:00:00

Updated: 2024-08-07T09:28:41.976Z

Reserved: 2008-07-24T00:00:00

Link: CVE-2008-3273

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-08-10T20:41:00.000

Modified: 2017-08-08T01:31:44.170

Link: CVE-2008-3273

cve-icon Redhat

Severity : Low

Publid Date: 2008-08-05T00:00:00Z

Links: CVE-2008-3273 - Bugzilla