Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2016-0793

EPSS 35.27% · P97
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-0793

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the (1) WEB-INF or (2) META-INF directory via a request that contains (a) lowercase or (b) "meaningless" characters.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Red Hat Wildfly 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat Wildfly(前称JBoss Application Server)是美国红帽(Red Hat)公司的一款基于JavaEE的开源应用服务器。 基于Windows平台的Red Hat WildFly 10.0.0版本中的servlet filter restriction机制中存在不完整黑名单漏洞。远程攻击者可通过发送包含小写字母或无意义的字符的请求利用该漏洞读取WEB-INF或META-INF目录中的敏感文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2016-0793

#POC DescriptionSource LinkShenlong Link
1Nonehttps://github.com/tafamace/CVE-2016-0793POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-0793

Please Login to view more intelligence information

Same Patch Batch · n/a · 2016-04-01 · 6 CVEs total

CVE-2016-1345Cisco Firepower System Software 安全漏洞
CVE-2016-1167NEC Aterm WG300HP 跨站请求伪造漏洞
CVE-2016-1168NEC Aterm WF800HP 跨站请求伪造漏洞
CVE-2016-2289ICONICS WebHMI 目录遍历漏洞
CVE-2016-2343Patterson Dental Eaglesoft 安全漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2016-0793

No comments yet


Leave a comment