CVE-2008-5083

CWE-200 — Information Exposure5 documents5 sources
Severity
6.5MEDIUM
EPSS
0.3%
top 45.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat Jboss Operations NetworkJON JON
Timeline
PublishedNov 8
Latest updateApr 21

Description

In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDredhat/jboss_operations_network2.1.0 — 2.1.2+1
▶CVEListV5jon/jon2.1.x before 2.1.2 SP1

🔴Vulnerability Details

2
GHSA
GHSA-9qjx-gq64-9354: In JON 2↗2022-04-21
▶
CVEList
CVE-2008-5083: In JON 2↗2019-11-07
▶

📋Vendor Advisories

1
Red Hat
JON unauthorized access private property↗2008-12-16
▶

💬Community

1
Bugzilla
CVE-2008-5083 JON unauthorized access private property↗2008-12-11
▶