Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WildFly Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2016-0793 - Vulnerability Database
WildFly Application Server

WildFly Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2016-0793

High
Reference: CVE-2016-0793
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-0793
Title: WildFly Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the (1) WEB-INF or (2) META-INF directory via a request that contains (a) lowercase or (b) quotmeaninglessquot characters.