WildFly WEB-INF/META-INF Information Leakage Vulnerability (CVE-2016-0793)

WildFly WEB-INF/META-INF Information Leakage Vulnerability (CVE-2016-0793)
WildFly WEB-INF/META-INF Information Leakage Vulnerability (CVE-2016-0793)

Release date:
Updated on:

Affected Systems:

WildFly <10.0.0.Final

Description:

CVE (CAN) ID: CVE-2016-0793

Previously called JBoss AS, Wildfly is an Application server written in Java.

In versions earlier than WildFly 10.0.0.Final (Windows), the servlet filter mechanism has an incomplete blacklist vulnerability. Remote attackers exploit this vulnerability to obtain sensitive files in WEB-INF or META-INF directories.

<* Source: Adam Mari & #353;
*>

Suggestion:

Vendor patch:

WildFly
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://bugzilla.redhat.com/show_bug.cgi? Id = 1305937

Refer:
Https://www.exploit-db.com/exploits/39573/

This article permanently updates the link address: