{"uuid": "b8f62c68-53b3-4e84-bc3e-b477484ae6c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1429", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/jboss_status.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Matteo Cantoni \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module queries the JBoss status servlet to collect sensitive\\n        information, including URL paths, GET parameters and client IP addresses.\\n        This module has been tested against JBoss 4.0, 4.2.2 and 4.2.3.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/jboss_status\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"JBoss Status Servlet Information Gathering\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/jboss_status.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/jboss_status\", \"references\": [\"CVE-2008-3273\", \"CVE-2010-1429\", \"URL-https://seclists.org/fulldisclosure/2011/Sep/139\", \"URL-https://owasp.org/www-pdf-archive/OWASP3011_Luca.pdf\", \"URL-https://www.slideshare.net/chrisgates/lares-fromlowtopwned\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:34.704751Z"}