CVE-2008-3273 - CVE House
Back to Database
Status published Medium CVE-2008-3273

JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03,...

Vulnerability Description

JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-3273

Credits & Attribution

No credits recorded in the NVD database.

References

More from jboss

View All →
CVE-2016-8656
Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to...
High 7
CVE-2016-2094
The HTTPS NIO Connector allows remote attackers to cause a...
High 7.5
CVE-2012-3428
The IronJacamar container before 1.0.12.Final for JBoss Application Server, when...
Medium 4.3
CVE-2007-6433
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam...
High 7.5
CVE-2007-1354
The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss...
Medium 6

Affected Vendor

Affected Software

enterprise application platform
Vulnerable Versions:
0, 4.2.0.cp01, 4.2.0.cp02

Timeline

Official Publish: August 10th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.