Description
It's possible to reach the status servlet on this JBoss system. The status servlet exposes details about the deployed servlets and makes it easier to identity the attack surface of an EAP installation.
Remediation
Restrict access to the status servlet.
References
Related Vulnerabilities
WordPress Plugin WP Custom Pages 'url' Parameter Local File Disclosure (0.5.0.1)
WordPress Plugin Contact Form Email Information Disclosure (1.2.66)
WordPress Plugin WordPress File Upload Multiple Vulnerabilities (2.7.6)
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8669)