.. / CVE-2010-1429

• Info Disclosure
• Nuclei
• Web

Exploit for Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure (CVE-2010-1429)

Description:

Red Hat JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 is susceptible to sensitive information disclosure. A remote attacker can obtain sensitive information about “deployed web contexts” via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.

Nuclei Template

View the template here CVE-2010-1429.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2010/CVE-2010-1429.yaml

References: