WildFly WEB-INF/META-INF Information Leakage Vulnerability (CVE-2016-0793)
WildFly WEB-INF/META-INF Information Leakage Vulnerability (CVE-2016-0793)
Release date:
Updated on:
Affected Systems:
WildFly <10.0.0.Final
Description:
CVE (CAN) ID: CVE-2016-0793
Previously called JBoss AS, Wildfly is an Application server written in Java.
In versions earlier than WildFly 10.0.0.Final (Windows), the servlet filter mechanism has an incomplete blacklist vulnerability. Remote attackers exploit this vulnerability to obtain sensitive files in WEB-INF or META-INF directories.
<* Source: Adam Mari & #353;
*>
Suggestion:
Vendor patch:
WildFly
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Https://bugzilla.redhat.com/show_bug.cgi? Id = 1305937
Refer:
Https://www.exploit-db.com/exploits/39573/
This article permanently updates the link address: