CVE-2008-3273 – JBossEAP status servlet info leak

https://notcve.org/view.php?id=CVE-2008-3273

10 Aug 2008 — JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. JBoss Enterprise Application Platform (también conocido como JBossEAP o EAP) anterior a 4.2.0.CP03 y 4.3.0 anterior a 4.3.0.CP01, permite a atacantes remotos obtener información sensible relacionada con "deployed web contexts" (Contexto... • https://packetstorm.news/files/id/181026 • CWE-264: Permissions, Privileges, and Access Controls •