CVE-2010-1429
Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and...
Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.
Exploit likelihood
What each source reports
NVD Score used
5.0
Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.
- Record
CVE-2010-1429- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.
- Record
CVE-2010-1429- Updated
- 2026-11-02
EUVDEUVD-2010-1457 No score
Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.
- Record
EUVD-2010-1457- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x26p-67q3-4mfx No score
Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and...
Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.
- Record
GHSA-x26p-67q3-4mfx- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.12.GA_CP03.ep1.el4 | 0:3.3.1-1.12.GA_CP03.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.12.GA_CP03.ep1.el4 | 0:3.3.1-1.12.GA_CP03.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4 |
hsqldbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:1.8.0.8-3.patch03.1jpp.ep1.3.el4 | 1:1.8.0.8-3.patch03.1jpp.ep1.3.el4 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.3.0-1jpp.ep1.10.el4 | 0:2.3.0-1jpp.ep1.10.el4 |
jakarta-commons-httpclientRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:3.0.1-1.patch01.1jpp.ep1.4.el4 | 1:3.0.1-1.patch01.1jpp.ep1.4.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:1.5.5-3.CP05.2.ep1.el4 | 0:1.5.5-3.CP05.2.ep1.el4 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP14.1.ep1.el4 | 0:1.4.1-6.SP14.1.ep1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.2.3-3.SP2.ep1.el4 | 0:2.2.3-3.SP2.ep1.el4 |
Show 70 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.24.el4 | 0:1.2.1-1.ep1.24.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.24.el4 | 0:1.2.1-1.ep1.24.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-6.GA_CP09.6.ep1.el4 | 0:4.2.0-6.GA_CP09.6.ep1.el4 |
jbossas-4.2.0.GA_CP09-binRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-6.GA_CP09.6.ep1.el4 | 0:4.2.0-6.GA_CP09.6.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-6.GA_CP09.6.ep1.el4 | 0:4.2.0-6.GA_CP09.6.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP13.0jpp.ep1.1.el4 | 0:2.0.0-6.CP13.0jpp.ep1.1.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-7.GA_CP09.ep1.5.el4 | 0:4.2.0-7.GA_CP09.ep1.5.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-7.GA_CP09.ep1.5.el4 | 0:4.2.0-7.GA_CP09.ep1.5.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.12.GA_CP03.ep1.el4 | 0:3.3.1-1.12.GA_CP03.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.12.GA_CP03.ep1.el4 | 0:3.3.1-1.12.GA_CP03.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4 |
hsqldbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:1.8.0.8-3.patch03.1jpp.ep1.3.el4 | 1:1.8.0.8-3.patch03.1jpp.ep1.3.el4 |
jacorbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.3.0-1jpp.ep1.10.el4 | 0:2.3.0-1jpp.ep1.10.el4 |
jakarta-commons-httpclientRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:3.0.1-1.patch01.1jpp.ep1.4.el4 | 1:3.0.1-1.patch01.1jpp.ep1.4.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.5.5-3.CP05.2.ep1.el4 | 0:1.5.5-3.CP05.2.ep1.el4 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP14.1.ep1.el4 | 0:1.4.1-6.SP14.1.ep1.el4 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.4.0-3.SP3_CP10.2.ep1.el4 | 0:1.4.0-3.SP3_CP10.2.ep1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.2.3-3.SP2.ep1.el4 | 0:2.2.3-3.SP2.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el4 |
jboss-seam2Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.2.FP-1.ep1.23.el4 | 0:2.0.2.FP-1.ep1.23.el4 |
jboss-seam2-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.2.FP-1.ep1.23.el4 | 0:2.0.2.FP-1.ep1.23.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-7.GA_CP08.5.ep1.el4 | 0:4.3.0-7.GA_CP08.5.ep1.el4 |
jbossas-4.3.0.GA_CP08-binRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-7.GA_CP08.5.ep1.el4 | 0:4.3.0-7.GA_CP08.5.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-7.GA_CP08.5.ep1.el4 | 0:4.3.0-7.GA_CP08.5.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP13.0jpp.ep1.1.el4 | 0:2.0.0-6.CP13.0jpp.ep1.1.el4 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.1-5.SP2_CP08.1.ep1.el4 | 0:2.0.1-5.SP2_CP08.1.ep1.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-7.GA_CP08.ep1.6.el4 | 0:4.3.0-7.GA_CP08.ep1.6.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-7.GA_CP08.ep1.6.el4 | 0:4.3.0-7.GA_CP08.ep1.6.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5 | 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.12.GA_CP03.ep1.el5 | 0:3.3.1-1.12.GA_CP03.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.12.GA_CP03.ep1.el5 | 0:3.3.1-1.12.GA_CP03.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5 | 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:2.3.0-1jpp.ep1.10.1.el5 | 0:2.3.0-1jpp.ep1.10.1.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:1.5.5-3.CP05.2.ep1.1.el5 | 0:1.5.5-3.CP05.2.ep1.1.el5 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP14.1.ep1.1.el5 | 0:1.4.1-6.SP14.1.ep1.1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:2.2.3-3.SP2.ep1.1.el5 | 0:2.2.3-3.SP2.ep1.1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.24.el5 | 0:1.2.1-1.ep1.24.el5 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.24.el5 | 0:1.2.1-1.ep1.24.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-6.GA_CP09.6.ep1.el5 | 0:4.2.0-6.GA_CP09.6.ep1.el5 |
jbossas-4.2.0.GA_CP09-binRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-6.GA_CP09.6.ep1.el5 | 0:4.2.0-6.GA_CP09.6.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-6.GA_CP09.6.ep1.el5 | 0:4.2.0-6.GA_CP09.6.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.1.el5 | 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP13.0jpp.ep1.1.1.el5 | 0:2.0.0-6.CP13.0jpp.ep1.1.1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-7.GA_CP09.ep1.4.1.el5 | 0:4.2.0-7.GA_CP09.ep1.4.1.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-7.GA_CP09.ep1.4.1.el5 | 0:4.2.0-7.GA_CP09.ep1.4.1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5 | 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.12.GA_CP03.ep1.el5 | 0:3.3.1-1.12.GA_CP03.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.12.GA_CP03.ep1.el5 | 0:3.3.1-1.12.GA_CP03.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5 | 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5 |
jacorbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.3.0-1jpp.ep1.10.1.el5 | 0:2.3.0-1jpp.ep1.10.1.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.5.5-3.CP05.2.ep1.1.el5 | 0:1.5.5-3.CP05.2.ep1.1.el5 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP14.1.ep1.1.el5 | 0:1.4.1-6.SP14.1.ep1.1.el5 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.4.0-3.SP3_CP10.2.ep1.el5 | 0:1.4.0-3.SP3_CP10.2.ep1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.2.3-3.SP2.ep1.1.el5 | 0:2.2.3-3.SP2.ep1.1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el5.1 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el5.1 |
jboss-seam2Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.2.FP-1.ep1.23.el5 | 0:2.0.2.FP-1.ep1.23.el5 |
jboss-seam2-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.2.FP-1.ep1.23.el5 | 0:2.0.2.FP-1.ep1.23.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-7.GA_CP08.5.ep1.el5 | 0:4.3.0-7.GA_CP08.5.ep1.el5 |
jbossas-4.3.0.GA_CP08-binRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-7.GA_CP08.5.ep1.el5 | 0:4.3.0-7.GA_CP08.5.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-7.GA_CP08.5.ep1.el5 | 0:4.3.0-7.GA_CP08.5.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.1.el5 | 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP13.0jpp.ep1.1.1.el5 | 0:2.0.0-6.CP13.0jpp.ep1.1.1.el5 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.1-5.SP2_CP08.1.ep1.1.el5 | 0:2.0.1-5.SP2_CP08.1.ep1.1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-7.GA_CP08.ep1.5.el5 | 0:4.3.0-7.GA_CP08.ep1.5.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-7.GA_CP08.ep1.5.el5 | 0:4.3.0-7.GA_CP08.ep1.5.el5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Nuclei | Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure | |
| Metasploit | JBoss Status Servlet Information Gathering | |
| Metasploit | JBoss Vulnerability Scanner |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, Metasploit, Nuclei, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1429 is a medium vulnerability (CVSS 5.0) in Redhat Jboss Enterprise Application Platform, published April 28, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 53.7%, the 99th percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2010-0379.html
rhn.redhat.com/errata/RHSA-2010-0378.html
marc.info?l=bugtraq&m=132698550418872&w=2
rhn.redhat.com/errata/RHSA-2010-0376.html
rhn.redhat.com/errata/RHSA-2010-0377.html
exchange.xforce.ibmcloud.com/vulnerabilities/58149
Show 35 moreShow less
vupen.com/english/advisories/2010/0992
exploit-db.com/exploits/44009
securityfocus.com/bid/39710
secunia.com/advisories/39563
securitytracker.com/id?1023918
bugzilla.redhat.com/show_bug.cgi?id=585900
nvd.nist.gov/vuln/detail/CVE-2010-1429
github.com/advisories/GHSA-x26p-67q3-4mfx
access.redhat.com/errata/RHSA-2010:0376
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=571813
bugzilla.redhat.com/show_bug.cgi?id=574105
bugzilla.redhat.com/show_bug.cgi?id=585899
redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp09/html-single/Release_Notes/index.html
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0376.json
access.redhat.com/security/cve/CVE-2010-0738
cve.org/CVERecord?id=CVE-2010-0738
nvd.nist.gov/vuln/detail/CVE-2010-0738
access.redhat.com/kb/docs/DOC-30741
cisa.gov/known-exploited-vulnerabilities-catalog
access.redhat.com/security/cve/CVE-2010-1428
cve.org/CVERecord?id=CVE-2010-1428
nvd.nist.gov/vuln/detail/CVE-2010-1428
access.redhat.com/security/cve/CVE-2010-1429
cve.org/CVERecord?id=CVE-2010-1429
access.redhat.com/errata/RHSA-2010:0377
redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp08/html-single/Release_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=571828
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0377.json
access.redhat.com/errata/RHSA-2010:0378
bugzilla.redhat.com/show_bug.cgi?id=571835
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0378.json
access.redhat.com/errata/RHSA-2010:0379
bugzilla.redhat.com/show_bug.cgi?id=571905
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0379.json