nuclei-templates/cves/2010/CVE-2010-1429.yaml

id: CVE-2010-1429

info:
  name: JBossEAP - Sensitive Information Disclosure
  author: R12W4N
  severity: low
  description: |
    Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2010-1429
    - https://nvd.nist.gov/vuln/detail/CVE-2008-3273
    - https://rhn.redhat.com/errata/RHSA-2010-0377.html
    - http://securitytracker.com/id?1023918
  classification:
    cve-id: CVE-2010-1429
  metadata:
    shodan-query: title:"JBoss"
    verified: "true"
  tags: cve,cve2010,jboss,eap,tomcat,exposure

requests:
  - method: GET
    path:
      - "{{BaseURL}}/status?full=true"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "JVM"
          - "memory"
          - "localhost/"
        condition: and

      - type: status
        status:
          - 200