Patchwire CVEs, their patch status, and feeds to follow them

CVE-2008-3519

Fixed in a distro release EPSS 2%

The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273.

Published 2008-09-23 · CVE record · OSV

Products: redhat jboss_enterprise_application_platform

Distro releases

ReleasePackageFixed in
Red Hat jboss enterprise application platform 4.2.0glassfish-javamail0:1.4.0-0jpp.ep1.10.el4
Red Hat jboss enterprise application platform 4.2.0hibernate31:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5
Red Hat jboss enterprise application platform 4.2.0hibernate31:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4
Red Hat jboss enterprise application platform 4.2.0hibernate3-annotations0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4
Red Hat jboss enterprise application platform 4.2.0hibernate3-annotations0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1
Red Hat jboss enterprise application platform 4.2.0hibernate3-annotations-javadoc0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4
Red Hat jboss enterprise application platform 4.2.0hibernate3-annotations-javadoc0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1
Red Hat jboss enterprise application platform 4.2.0hibernate3-javadoc1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4
Red Hat jboss enterprise application platform 4.2.0hibernate3-javadoc1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5
Red Hat jboss enterprise application platform 4.2.0hibernate3-validator0:0.0.0-1.1jpp.ep1.1.el4
Red Hat jboss enterprise application platform 4.2.0jboss-aop0:1.5.5-2.CP02.0jpp.ep1.2.el4
Red Hat jboss enterprise application platform 4.2.0jboss-aop0:1.5.5-2.CP02.0jpp.ep1.2.el5
Red Hat jboss enterprise application platform 4.2.0jboss-remoting0:2.2.2-3.SP9.0jpp.ep1.2.el5
Red Hat jboss enterprise application platform 4.2.0jboss-remoting0:2.2.2-3.SP9.0jpp.ep1.1.el4
Red Hat jboss enterprise application platform 4.2.0jboss-seam0:1.2.1-1.ep1.9.el5
Red Hat jboss enterprise application platform 4.2.0jboss-seam0:1.2.1-1.ep1.10.el4
Red Hat jboss enterprise application platform 4.2.0jboss-seam-docs0:1.2.1-1.ep1.9.el5
Red Hat jboss enterprise application platform 4.2.0jboss-seam-docs0:1.2.1-1.ep1.10.el4
Red Hat jboss enterprise application platform 4.2.0jbossas0:4.2.0-3.GA_CP04.ep1.8.el4
Red Hat jboss enterprise application platform 4.2.0jbossas0:4.2.0-4.GA_CP04.ep1.7.el5.6
Red Hat jboss enterprise application platform 4.2.0jbossts1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4
Red Hat jboss enterprise application platform 4.2.0jbossts1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5
Red Hat jboss enterprise application platform 4.2.0jbossweb0:2.0.0-4.CP06.0jpp.ep1.1.el5
Red Hat jboss enterprise application platform 4.2.0jbossweb0:2.0.0-4.CP06.0jpp.ep1.1.el4
Red Hat jboss enterprise application platform 4.2.0rh-eap-docs0:4.2.0-4.GA_CP04.ep1.3.el5
Red Hat jboss enterprise application platform 4.2.0rh-eap-docs0:4.2.0-4.GA_CP04.ep1.5.el4
Red Hat jboss enterprise application platform 4.2.0rh-eap-docs-examples0:4.2.0-4.GA_CP04.ep1.5.el4
Red Hat jboss enterprise application platform 4.2.0rh-eap-docs-examples0:4.2.0-4.GA_CP04.ep1.3.el5
Red Hat jboss enterprise application platform 4.3.0glassfish-jaf0:1.1.0-0jpp.ep1.12.el5.1
Red Hat jboss enterprise application platform 4.3.0glassfish-javamail0:1.4.0-0jpp.ep1.10.el5
Red Hat jboss enterprise application platform 4.3.0glassfish-javamail0:1.4.0-0jpp.ep1.10.el4
Red Hat jboss enterprise application platform 4.3.0glassfish-jaxb0:2.1.4-1jpp.ep1.2.el4
Red Hat jboss enterprise application platform 4.3.0glassfish-jaxb0:2.1.4-1jpp.ep1.4.el5.2
Red Hat jboss enterprise application platform 4.3.0glassfish-jaxb-javadoc0:2.1.4-1jpp.ep1.2.el4
Red Hat jboss enterprise application platform 4.3.0glassfish-jaxws0:2.1.1-1jpp.ep1.3.el5
Red Hat jboss enterprise application platform 4.3.0glassfish-jaxws0:2.1.1-1jpp.ep1.3.el4
Red Hat jboss enterprise application platform 4.3.0glassfish-jstl0:1.2.0-0jpp.ep1.10.el5
Red Hat jboss enterprise application platform 4.3.0hibernate31:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4
Red Hat jboss enterprise application platform 4.3.0hibernate31:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5
Red Hat jboss enterprise application platform 4.3.0hibernate3-annotations0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1
Red Hat jboss enterprise application platform 4.3.0hibernate3-annotations0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4
Red Hat jboss enterprise application platform 4.3.0hibernate3-annotations-javadoc0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4
Red Hat jboss enterprise application platform 4.3.0hibernate3-annotations-javadoc0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1
Red Hat jboss enterprise application platform 4.3.0hibernate3-commons-annotations0:0.0.0-1.1jpp.ep1.1.el5
Red Hat jboss enterprise application platform 4.3.0hibernate3-entitymanager0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5
Red Hat jboss enterprise application platform 4.3.0hibernate3-entitymanager-javadoc0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5
Red Hat jboss enterprise application platform 4.3.0hibernate3-javadoc1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4
Red Hat jboss enterprise application platform 4.3.0hibernate3-javadoc1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5
Red Hat jboss enterprise application platform 4.3.0hibernate3-validator0:0.0.0-1.1jpp.ep1.1.el4
Red Hat jboss enterprise application platform 4.3.0hibernate3-validator0:0.0.0-1.1jpp.ep1.1.el5
Red Hat jboss enterprise application platform 4.3.0javassist0:3.8.0-1.ep1.el4
Red Hat jboss enterprise application platform 4.3.0javassist0:3.8.0-1jpp.ep1.2.el5
Red Hat jboss enterprise application platform 4.3.0jboss-aop0:1.5.5-2.CP02.0jpp.ep1.2.el4
Red Hat jboss enterprise application platform 4.3.0jboss-aop0:1.5.5-2.CP02.0jpp.ep1.2.el5
Red Hat jboss enterprise application platform 4.3.0jboss-jaxr0:1.2.0-SP1.0jpp.ep1.4.el5
Red Hat jboss enterprise application platform 4.3.0jboss-messaging0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el4
Red Hat jboss enterprise application platform 4.3.0jboss-messaging0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el5
Red Hat jboss enterprise application platform 4.3.0jboss-remoting0:2.2.2-3.SP9.0jpp.ep1.2.el5
Red Hat jboss enterprise application platform 4.3.0jboss-remoting0:2.2.2-3.SP9.0jpp.ep1.1.el4
Red Hat jboss enterprise application platform 4.3.0jboss-seam0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el4
Red Hat jboss enterprise application platform 4.3.0jboss-seam0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1
Red Hat jboss enterprise application platform 4.3.0jboss-seam-docs0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el4
Red Hat jboss enterprise application platform 4.3.0jboss-seam-docs0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1
Red Hat jboss enterprise application platform 4.3.0jbossas0:4.3.0-2.GA_CP02.ep1.10.el4
Red Hat jboss enterprise application platform 4.3.0jbossas0:4.3.0-2.GA_CP02.ep1.10.el5.2
Red Hat jboss enterprise application platform 4.3.0jbossts1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4
Red Hat jboss enterprise application platform 4.3.0jbossts1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5
Red Hat jboss enterprise application platform 4.3.0jbossweb0:2.0.0-4.CP06.0jpp.ep1.1.el4
Red Hat jboss enterprise application platform 4.3.0jbossweb0:2.0.0-4.CP06.0jpp.ep1.1.el5
Red Hat jboss enterprise application platform 4.3.0jbossws0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el5.1
Red Hat jboss enterprise application platform 4.3.0jbossws0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el4
Red Hat jboss enterprise application platform 4.3.0jbossws-common0:1.0.0-1.GA_CP01.0jpp.ep1.3.el4
Red Hat jboss enterprise application platform 4.3.0jbossws-common0:1.0.0-1.GA_CP01.0jpp.ep1.3.el5
Red Hat jboss enterprise application platform 4.3.0jbossws-framework0:2.0.1-0jpp.ep1.11.el4
Red Hat jboss enterprise application platform 4.3.0jbossws-framework0:2.0.1-0jpp.ep1.11.el5
Red Hat jboss enterprise application platform 4.3.0jbossxb0:1.0.0-2.SP3.0jpp.ep1.3.el5.1
Red Hat jboss enterprise application platform 4.3.0rh-eap-docs0:4.3.0-2.GA_CP02.ep1.6.el5
Red Hat jboss enterprise application platform 4.3.0rh-eap-docs0:4.3.0-3.GA_CP02.ep1.9.el4
Red Hat jboss enterprise application platform 4.3.0rh-eap-docs-examples0:4.3.0-3.GA_CP02.ep1.9.el4