Skip to content
feed: live
>_0dayNews
CVE Record
[ MEDIUM ]CVE-2010-0738

Red Hat JBoss Authentication Bypass Vulnerability

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

cat cve-2010-0738.json
Vendor
Red Hat
Product
JBoss
CVSS
5.3
EPSS (exploit probability)
79.4%
Status
kevransomware use
CISA patch-by (BOD 22-01)
Published
Source
https://nvd.nist.gov/vuln/detail/CVE-2010-0738

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application’s GET handler by using a different method.

Added to CISA’s Known Exploited Vulnerabilities catalog on 2022-05-25. Required action per CISA: Apply updates per vendor instructions. Due date: 2022-06-15.

This is an auto-synced KEV catalog record pending a full 0dayNews write-up — see CISA’s KEV catalog and the NVD record linked above for primary sources.