CVE-2008-3519

The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3…

published September 23, 2008

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01621 · 75.8th percentile
Published
2008-09-23T14:00Z
EPSS history
Timeline
  • 23 SEP 14:00Z
    The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3…
    cvelistv5