Every CVE Search/ Get API key

CVE-2010-1429

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and...

5.0 Medium

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.

Exploit likelihood

53.7%Up 49.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.

Record
CVE-2010-1429
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.

Record
CVE-2010-1429
Updated
2026-11-02
EUVDEUVD-2010-1457 No score

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.

Record
EUVD-2010-1457
Updated
2026-11-03
GitHub AdvisoriesGHSA-x26p-67q3-4mfx No score

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and...

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.

Record
GHSA-x26p-67q3-4mfx
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:3.3.1-1.12.GA_CP03.ep1.el4
0:3.3.1-1.12.GA_CP03.ep1.el4
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:3.3.1-1.12.GA_CP03.ep1.el4
0:3.3.1-1.12.GA_CP03.ep1.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4
hsqldb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 1:1.8.0.8-3.patch03.1jpp.ep1.3.el4
1:1.8.0.8-3.patch03.1jpp.ep1.3.el4
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:2.3.0-1jpp.ep1.10.el4
0:2.3.0-1jpp.ep1.10.el4
jakarta-commons-httpclient
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 1:3.0.1-1.patch01.1jpp.ep1.4.el4
1:3.0.1-1.patch01.1jpp.ep1.4.el4
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:1.5.5-3.CP05.2.ep1.el4
0:1.5.5-3.CP05.2.ep1.el4
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:1.4.1-6.SP14.1.ep1.el4
0:1.4.1-6.SP14.1.ep1.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:2.2.3-3.SP2.ep1.el4
0:2.2.3-3.SP2.ep1.el4
Show 70 moreShow less
Affected packages
PackageAffectedFixed
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:1.2.1-1.ep1.24.el4
0:1.2.1-1.ep1.24.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:1.2.1-1.ep1.24.el4
0:1.2.1-1.ep1.24.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:4.2.0-6.GA_CP09.6.ep1.el4
0:4.2.0-6.GA_CP09.6.ep1.el4
jbossas-4.2.0.GA_CP09-bin
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:4.2.0-6.GA_CP09.6.ep1.el4
0:4.2.0-6.GA_CP09.6.ep1.el4
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:4.2.0-6.GA_CP09.6.ep1.el4
0:4.2.0-6.GA_CP09.6.ep1.el4
jbossts
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.el4
1:4.2.3-1.SP5_CP09.1jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:2.0.0-6.CP13.0jpp.ep1.1.el4
0:2.0.0-6.CP13.0jpp.ep1.1.el4
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:4.2.0-7.GA_CP09.ep1.5.el4
0:4.2.0-7.GA_CP09.ep1.5.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 3 CVEs
before 0:4.2.0-7.GA_CP09.ep1.5.el4
0:4.2.0-7.GA_CP09.ep1.5.el4
hibernate3
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:3.3.1-1.12.GA_CP03.ep1.el4
0:3.3.1-1.12.GA_CP03.ep1.el4
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:3.3.1-1.12.GA_CP03.ep1.el4
0:3.3.1-1.12.GA_CP03.ep1.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4
hsqldb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 1:1.8.0.8-3.patch03.1jpp.ep1.3.el4
1:1.8.0.8-3.patch03.1jpp.ep1.3.el4
jacorb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:2.3.0-1jpp.ep1.10.el4
0:2.3.0-1jpp.ep1.10.el4
jakarta-commons-httpclient
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 1:3.0.1-1.patch01.1jpp.ep1.4.el4
1:3.0.1-1.patch01.1jpp.ep1.4.el4
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:1.5.5-3.CP05.2.ep1.el4
0:1.5.5-3.CP05.2.ep1.el4
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:1.4.1-6.SP14.1.ep1.el4
0:1.4.1-6.SP14.1.ep1.el4
jboss-messaging
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:1.4.0-3.SP3_CP10.2.ep1.el4
0:1.4.0-3.SP3_CP10.2.ep1.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:2.2.3-3.SP2.ep1.el4
0:2.2.3-3.SP2.ep1.el4
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el4
jboss-seam2
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:2.0.2.FP-1.ep1.23.el4
0:2.0.2.FP-1.ep1.23.el4
jboss-seam2-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:2.0.2.FP-1.ep1.23.el4
0:2.0.2.FP-1.ep1.23.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:4.3.0-7.GA_CP08.5.ep1.el4
0:4.3.0-7.GA_CP08.5.ep1.el4
jbossas-4.3.0.GA_CP08-bin
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:4.3.0-7.GA_CP08.5.ep1.el4
0:4.3.0-7.GA_CP08.5.ep1.el4
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:4.3.0-7.GA_CP08.5.ep1.el4
0:4.3.0-7.GA_CP08.5.ep1.el4
jbossts
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.el4
1:4.2.3-1.SP5_CP09.1jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:2.0.0-6.CP13.0jpp.ep1.1.el4
0:2.0.0-6.CP13.0jpp.ep1.1.el4
jbossws
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:2.0.1-5.SP2_CP08.1.ep1.el4
0:2.0.1-5.SP2_CP08.1.ep1.el4
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:4.3.0-7.GA_CP08.ep1.6.el4
0:4.3.0-7.GA_CP08.ep1.6.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
before 0:4.3.0-7.GA_CP08.ep1.6.el4
0:4.3.0-7.GA_CP08.ep1.6.el4
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5
1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:3.3.1-1.12.GA_CP03.ep1.el5
0:3.3.1-1.12.GA_CP03.ep1.el5
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:3.3.1-1.12.GA_CP03.ep1.el5
0:3.3.1-1.12.GA_CP03.ep1.el5
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5
1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:2.3.0-1jpp.ep1.10.1.el5
0:2.3.0-1jpp.ep1.10.1.el5
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:1.5.5-3.CP05.2.ep1.1.el5
0:1.5.5-3.CP05.2.ep1.1.el5
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:1.4.1-6.SP14.1.ep1.1.el5
0:1.4.1-6.SP14.1.ep1.1.el5
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:2.2.3-3.SP2.ep1.1.el5
0:2.2.3-3.SP2.ep1.1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:1.2.1-1.ep1.24.el5
0:1.2.1-1.ep1.24.el5
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:1.2.1-1.ep1.24.el5
0:1.2.1-1.ep1.24.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:4.2.0-6.GA_CP09.6.ep1.el5
0:4.2.0-6.GA_CP09.6.ep1.el5
jbossas-4.2.0.GA_CP09-bin
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:4.2.0-6.GA_CP09.6.ep1.el5
0:4.2.0-6.GA_CP09.6.ep1.el5
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:4.2.0-6.GA_CP09.6.ep1.el5
0:4.2.0-6.GA_CP09.6.ep1.el5
jbossts
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.1.el5
1:4.2.3-1.SP5_CP09.1jpp.ep1.1.1.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:2.0.0-6.CP13.0jpp.ep1.1.1.el5
0:2.0.0-6.CP13.0jpp.ep1.1.1.el5
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:4.2.0-7.GA_CP09.ep1.4.1.el5
0:4.2.0-7.GA_CP09.ep1.4.1.el5
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 3 CVEs
before 0:4.2.0-7.GA_CP09.ep1.4.1.el5
0:4.2.0-7.GA_CP09.ep1.4.1.el5
hibernate3
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5
1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:3.3.1-1.12.GA_CP03.ep1.el5
0:3.3.1-1.12.GA_CP03.ep1.el5
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:3.3.1-1.12.GA_CP03.ep1.el5
0:3.3.1-1.12.GA_CP03.ep1.el5
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5
1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5
jacorb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:2.3.0-1jpp.ep1.10.1.el5
0:2.3.0-1jpp.ep1.10.1.el5
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:1.5.5-3.CP05.2.ep1.1.el5
0:1.5.5-3.CP05.2.ep1.1.el5
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:1.4.1-6.SP14.1.ep1.1.el5
0:1.4.1-6.SP14.1.ep1.1.el5
jboss-messaging
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:1.4.0-3.SP3_CP10.2.ep1.el5
0:1.4.0-3.SP3_CP10.2.ep1.el5
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:2.2.3-3.SP2.ep1.1.el5
0:2.2.3-3.SP2.ep1.1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el5.1
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el5.1
jboss-seam2
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:2.0.2.FP-1.ep1.23.el5
0:2.0.2.FP-1.ep1.23.el5
jboss-seam2-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:2.0.2.FP-1.ep1.23.el5
0:2.0.2.FP-1.ep1.23.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:4.3.0-7.GA_CP08.5.ep1.el5
0:4.3.0-7.GA_CP08.5.ep1.el5
jbossas-4.3.0.GA_CP08-bin
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:4.3.0-7.GA_CP08.5.ep1.el5
0:4.3.0-7.GA_CP08.5.ep1.el5
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:4.3.0-7.GA_CP08.5.ep1.el5
0:4.3.0-7.GA_CP08.5.ep1.el5
jbossts
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.1.el5
1:4.2.3-1.SP5_CP09.1jpp.ep1.1.1.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:2.0.0-6.CP13.0jpp.ep1.1.1.el5
0:2.0.0-6.CP13.0jpp.ep1.1.1.el5
jbossws
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:2.0.1-5.SP2_CP08.1.ep1.1.el5
0:2.0.1-5.SP2_CP08.1.ep1.1.el5
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:4.3.0-7.GA_CP08.ep1.5.el5
0:4.3.0-7.GA_CP08.ep1.5.el5
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
before 0:4.3.0-7.GA_CP08.ep1.5.el5
0:4.3.0-7.GA_CP08.ep1.5.el5

Public exploits

Links only. Every CVE stores no exploit code.

History

History
RecordedChangedSources
affected, exploits, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, Metasploit, Nuclei, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1429 is a medium vulnerability (CVSS 5.0) in Redhat Jboss Enterprise Application Platform, published April 28, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 53.7%, the 99th percentile. No source names a fixed version.

References

Show 35 moreShow less
MoveEnter Open