CVE-2008-3273 PUBLISHED CVSS 5 MEDIUM

JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string.

EPSS 41.40% · 97.4th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
41.40%
97.4th percentile

Affected Products

VendorProductVersions
n/an/an/a
jbossenterprise_application_platform0, 0, 4.2.0.cp01

Timeline

References

Open in Interactive Console →