Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jboss EAP Configuration Vulnerability - CVE-2008-3519 - Vulnerability Database
Jboss EAP

Jboss EAP Configuration Vulnerability - CVE-2008-3519

Medium
Reference: CVE-2008-3519
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-3519
Title: Jboss EAP Configuration Vulnerability
Overview:

The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP) possibly 4.2 before CP04 and 4.3 before CP02 when a production environment is enabled sets the DownloadServerClasses property to true which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request a different vulnerability than CVE-2008-3273.