NVD

Id
3392  
Name
CVE-2008-3519  
Description
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-09-23  
Modified Date
2009-03-07  
Seq
2008-3519  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21281 3392 CVE-2008-3519 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458823  View
21282 3392 CVE-2008-3519 http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp04/html-single/readme/index.html  View
21283 3392 CVE-2008-3519 http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp02/html-single/readme/index.html  View
21284 3392 CVE-2008-3519 RHSA-2008:0831  View
21285 3392 CVE-2008-3519 RHSA-2008:0832  View
21286 3392 CVE-2008-3519 RHSA-2008:0833  View
21287 3392 CVE-2008-3519 RHSA-2008:0834  View
21288 3392 CVE-2008-3519 31300  View
21289 3392 CVE-2008-3519 1020905  View
21290 3392 CVE-2008-3519 jboss-downloadserverclasses-info-disclosure(45305)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50801 JVNDB-2008-006111 Red Hat JBoss Enterprise Application Platform の JBossAs コンポーネントにおける重要な情報を取得される脆弱性 Red Hat JBoss Enterprise Application Platform の JBossAs コンポーネントのデフォルト設定は、本番環境が有効になっている際、DownloadServerClasses プロパティに true を設定するため、重要な情報 (非 EJB クラス) を取得される脆弱性が存在します。 CVE-2008-3519 33632 CVE-2008-3519 3392 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006111.html 2008-09-22 2012-12-20 View