REDHAT-BUG-585900: Low severity Red Hat JBoss Enterprise Application Platform vulnerability

Published Apr 26, 2010

Updated

The JBoss Enterprise Application Platform 4.2.0.CP03 and 4.3.0.CP01 updates for Red Hat Enterprise Linux 4 and 5 fixed an issue (CVE-2008-3273) where unauthenticated users were able to access the status servlet; however, a bug fix included in the 4.2.0.CP06 and 4.3.0.CP04 updates re-introduced the issue.

A remote attacker could use this flaw to acquire details about deployed web contexts.

Affected Software

1 affected component

Red Hat JBoss Enterprise Application Platform

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade JBoss Enterprise Application Platform to a version that resolves this vulnerability.
Fixed in 4.2.0.CP03
Upgrade
Upgrade JBoss Enterprise Application Platform to a version that resolves this vulnerability.
Fixed in 4.3.0.CP01

Event History

Apr 26, 2010

Data Sourced

via Red Hat·11:26 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-585900?

The severity of REDHAT-BUG-585900 is considered moderate due to its potential impact on unauthorized access.

How do I fix REDHAT-BUG-585900?

To fix REDHAT-BUG-585900, you should update the JBoss Enterprise Application Platform to the latest patched version provided by Red Hat.

What issue does REDHAT-BUG-585900 address?

REDHAT-BUG-585900 addresses a bug fix for CVE-2008-3273 related to unauthenticated access to the status servlet.

Which products are affected by REDHAT-BUG-585900?

The affected products for REDHAT-BUG-585900 include JBoss Enterprise Application Platform versions 4.2.0.CP03 and 4.3.0.CP01.

When was REDHAT-BUG-585900 reported?

REDHAT-BUG-585900 was reported as part of ongoing security improvements to align with vulnerabilities fixed in earlier releases.