Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2010-1429 PoC — Red Hat JBoss Enterprise Application Platform 权限许可和访问控制问题漏洞

Source
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1429.yaml
Associated Vulnerability
Title:Red Hat JBoss Enterprise Application Platform 权限许可和访问控制问题漏洞 (CVE-2010-1429)
Description:Red Hat JBoss Enterprise Application Platform（EAP）是美国红帽（Red Hat）公司的一套开源的、基于J2EE的中间件平台。该平台主要用于构建、部署和托管Java应用程序与服务。 Red Hat JBoss Enterprise Application Platform 4.2版本至4.2.0.CP09之前版本、4.3版本至4.3.0.CP08之前版本存在权限许可和访问控制问题漏洞。攻击者利用该漏洞可以访问敏感信息。
Description
Red Hat JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 is susceptible to sensitive information disclosure. A remote attacker can obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.
File Snapshot

 id: CVE-2010-1429

info:
  name: Red Hat JBoss Enterprise Application Platform - Sensitive Informati

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.