Description
It's possible to reach the status servlet on this JBoss system. The status servlet exposes details about the deployed servlets and makes it easier to identity the attack surface of an EAP installation.
Remediation
Restrict access to the status servlet.
References
Related Vulnerabilities
PHP opcache-status page publicly accessible
WordPress Plugin W4 Post List Multiple Vulnerabilities (2.4.5)
Python Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-3426)
WordPress Plugin Easy Author Image Information Disclosure (1.5)
WordPress Plugin WordPress Mobile Pack Information Disclosure (2.0.1)