CVE-2008-3273
JBoss Enterprise Application Platform < 4.2.0.CP03 and 4.3.0 < 4.3.0.CP01 - Information Disclosure via Status Servlet
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-3273.
PoCs published by Tyler Krpata, Zach Grace <@ztgrace>, including Metasploit module auxiliary/scanner/http/jboss_vulnscan.
AI-analyzed exploit summary This Metasploit module scans JBoss instances for multiple vulnerabilities, including CVE-2008-3273, by checking for unauthenticated access to sensitive endpoints and default credentials. It does not exploit the vulnerabilities but detects their presence.
Description
JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string.
Exploits (2)
This Metasploit module scans JBoss instances for multiple vulnerabilities, including CVE-2008-3273, by checking for unauthenticated access to sensitive endpoints and default credentials. It does not exploit the vulnerabilities but detects their presence.
This Metasploit auxiliary module queries the JBoss status servlet to collect sensitive information such as URL paths, GET parameters, and client IP addresses. It is designed for information gathering and does not contain offensive techniques like reverse shells or command injection.