PT-2019-6497 · Red Hat · Jboss On

Marc Schoenefeld · Published 2019-11-07 · Updated 2019-11-14 · CVE-2008-5083

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions JBoss ON versions 2.1.x through 2.1.2 before SP1

Description The issue allows users to obtain unauthorized security information about private resources managed by JBoss ON.

Recommendations For JBoss ON versions 2.1.x through 2.1.2 before SP1, update to at least version 2.1.2 SP1 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-5083

Affected Products

Jboss On

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-5083 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-5083 · Vendor Advisory
• https://access.redhat.com/security/cve/cve-2008-5083 · Vendor Advisory
• https://t.me/cibsecurity/8125 · Telegram Post
• https://t.me/cibsecurity/7994 · Telegram Post