CVE-2016-0793

Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows…

published April 1, 2016

CVSS

—

EPSS

15%

Percentile

96.7

In the wild

Unconfirmed

What it is

Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the (1) WEB-INF or (2) META-INF directory via a request that contains (a) lowercase or (b) "meaningless" characters.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.14853 · 96.7th percentile
Published: 2016-04-01T19:00Z

EPSS history

Timeline

01 APR 19:00Z
Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows…
cvelistv5