Advisory Published
Updated

REDHAT-BUG-585900

First published: Mon Apr 26 2010(Updated: )

The JBoss Enterprise Application Platform 4.2.0.CP03 and 4.3.0.CP01 updates for Red Hat Enterprise Linux 4 and 5 fixed an issue (<a href="https://access.redhat.com/security/cve/CVE-2008-3273">CVE-2008-3273</a>) where unauthenticated users were able to access the status servlet; however, a bug fix included in the 4.2.0.CP06 and 4.3.0.CP04 updates re-introduced the issue. A remote attacker could use this flaw to acquire details about deployed web contexts.

Affected SoftwareAffected VersionHow to fix
JBoss Enterprise Application Platform

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of REDHAT-BUG-585900?

    The severity of REDHAT-BUG-585900 is considered moderate due to its potential impact on unauthorized access.

  • How do I fix REDHAT-BUG-585900?

    To fix REDHAT-BUG-585900, you should update the JBoss Enterprise Application Platform to the latest patched version provided by Red Hat.

  • What issue does REDHAT-BUG-585900 address?

    REDHAT-BUG-585900 addresses a bug fix for CVE-2008-3273 related to unauthenticated access to the status servlet.

  • Which products are affected by REDHAT-BUG-585900?

    The affected products for REDHAT-BUG-585900 include JBoss Enterprise Application Platform versions 4.2.0.CP03 and 4.3.0.CP01.

  • When was REDHAT-BUG-585900 reported?

    REDHAT-BUG-585900 was reported as part of ongoing security improvements to align with vulnerabilities fixed in earlier releases.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203