Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Redhat JBoss Enterprise Application Platform任意XML文件信息泄露漏洞
Vulnerability Description
JBoss Enterprise Application Platform (又称JBoss EAP或JBEAP) 4.2.0.CP06之前的版本4.2以及4.3.0.CP04之前的版本4.3中的JBossWS的请求处理程序没有适当地在对具有一个客户网络服务终端的WSDL文件的请求中校验资源路径，这会允许远程攻击者可以借助一个特制的请求，读取任意XML文件。
CVSS Information
N/A
Vulnerability Type
N/A