CVE-2008-5083 Information disclosure in JON

What is CVE-2008-5083?

CVE-2008-5083 is a medium-severity vulnerability in JON, published on 7 Nov 2019. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON.

Weakness: CWE-200

Which versions are affected by CVE-2008-5083?

It affects 1 product.

Products include Redhat Jboss Operations Network.

How do I fix CVE-2008-5083?

No fix has been published for CVE-2008-5083 yet. Limit exposure of the affected software until one is available.

Is CVE-2008-5083 being exploited?

There is no known exploitation of CVE-2008-5083 in the wild and no public exploit code.

Other vulnerabilities in JON

• CVE-2016-6330 Deserialization in n/a Critical 9.8
• CVE-2016-3737 Deserialization in n/a Critical 9.8
• CVE-2015-0297 Missing authorization in n/a Critical 9.0
• CVE-2016-5422 Privilege escalation in n/a High 8.8
• CVE-2010-0737 Missing authorization in JBoss High 8.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-9qjx-gq64-9354.