CVE-2010-1429

Name: CVE-2010-1429
Creator: NVD / NIST
Published: 2010-04-28T22:30:00.84+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 53.73%

Last modified Jun 16, 2026

CVE-2010-1429 is a vulnerability of currently unknown severity. Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.. EPSS estimates a 53.73% chance of exploitation in the next 30 days.

Description

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.

Metrics

EPSS Probability

53.73%

98.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-264

Affected Software

Vendor	Product	Versions	Update
Redhat	Jboss Enterprise Application Platform	<= 4.2.0	Cp08
Redhat	Jboss Enterprise Application Platform	<= 4.3.0	Cp07
Redhat	Jboss Enterprise Application Platform	4.2	—
Redhat	Jboss Enterprise Application Platform	4.2.0	Cp01
Redhat	Jboss Enterprise Application Platform	4.3	—
Redhat	Jboss Enterprise Application Platform	4.3.0	Cp01

References

http://marc.info/?l=bugtraq&m=132698550418872&w=2
http://secunia.com/advisories/39563Vendor Advisory
http://securitytracker.com/id?1023918
http://www.securityfocus.com/bid/39710
http://www.vupen.com/english/advisories/2010/0992Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=585900
https://exchange.xforce.ibmcloud.com/vulnerabilities/58149
https://rhn.redhat.com/errata/RHSA-2010-0376.htmlVendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0377.htmlVendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0378.htmlVendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0379.htmlVendor Advisory
https://www.exploit-db.com/exploits/44009/
http://marc.info/?l=bugtraq&m=132698550418872&w=2
http://secunia.com/advisories/39563Vendor Advisory
http://securitytracker.com/id?1023918
http://www.securityfocus.com/bid/39710
http://www.vupen.com/english/advisories/2010/0992Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=585900
https://exchange.xforce.ibmcloud.com/vulnerabilities/58149
https://rhn.redhat.com/errata/RHSA-2010-0376.htmlVendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0377.htmlVendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0378.htmlVendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0379.htmlVendor Advisory
https://www.exploit-db.com/exploits/44009/

Timeline

Published: Apr 28, 2010
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2010-1429?

How severe is CVE-2010-1429?

Severity scoring for CVE-2010-1429 is pending analysis. The EPSS model estimates a 53.73% probability of exploitation in the next 30 days.

How do I fix CVE-2010-1429?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-1429?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST