Sun Java System Application Server Information Disclosure Vulnerability

Bugtraq ID:	33397
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 21 2009 12:00AM
Updated:	Jan 22 2009 04:12PM
Credit:	The vendor reported this issue.
Vulnerable:	Sun Java System Application Server Platform Edition 8.2 Sun Java System Application Server Platform Edition 8.1 Sun Java System Application Server Enterprise Edition 8.2 Sun Java System Application Server Enterprise Edition 8.1
Not Vulnerable:

Sun Java System Application Server Information Disclosure Vulnerability

Sun Java System Application Server is prone to a remote information-disclosure vulnerability.

Attackers can exploit this issue to obtain potentially sensitive information that may aid in further attacks.

Sun Java System Application Server Information Disclosure Vulnerability

Attackers may use a browser or other client utilities to exploit this issue.

Sun Java System Application Server Information Disclosure Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.

Sun Java System Application Server Information Disclosure Vulnerability

References:

• Sun Java System Application Server Homepage (Sun)
  
• 245446 - A Security Vulnerability in Sun Java System Application Server (Sun)