CVE:CVE-2008-3519
CNNVD:CNNVD-200809-288
JBoss企业应用平台(EAP)是J2EE应用的中间件平台。
EAP的JBossAs组件将生产环境中的DownloadServerClasses属性设置为true，这允许下载非EJB类，导致信息泄露。
solution:Upgrade redhat jboss_enterprise_application_platform to a higher version than *:cp03,*:cp01,4.2,4.2:cp01,4.2:cp02,4.3,and avoid the version *:cp03,*:cp01,4.2,4.2:cp01,4.2:cp02,4.3