Red Hat JBoss Authentication Bypass Vulnerability
Medium CVSS 5.3 Listed in CISA KEV
Summary
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- Red Hat:JBoss
- :
Sources
- CISA KEV DATABASE
- NVD DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2010-0738 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
- http://marc.info/?l=bugtraq&m=132129312609324&w=2 Exploit
- http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35 Third Party Advisory
- http://secunia.com/advisories/39563 Broken Link
- http://securityreason.com/securityalert/8408 Broken Link
- http://securitytracker.com/id?1023918 Broken Link
- http://www.securityfocus.com/bid/39710 Broken Link
- http://www.vupen.com/english/advisories/2010/0992 Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=574105 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58147 Third Party Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0376.html Broken Link
- https://rhn.redhat.com/errata/RHSA-2010-0377.html Broken Link
- https://rhn.redhat.com/errata/RHSA-2010-0378.html Broken Link
- https://rhn.redhat.com/errata/RHSA-2010-0379.html Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0738 US Government Resource
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV
- nvd_ingest NVD