Vendor / Project: Red Hat Product: JBoss Description: The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method. Required Action: Apply updates per vendor instructions. Due Date: 2022-06-15 Ransomware Campaign Use: Known CWEs: CWE-264 Notes: https://nvd.nist.gov/vuln/detail/CVE-2010-0738
CVE-2010-0738 — Red Hat JBoss Authentication Bypass Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-05-25 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 5.3
- Quelle-ID:
cisa_kev - uid_hash:
582f27a312196436383e5a5092ba2eb97230448ae02a8f3a11ca58f247ce9b6f
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
MEDIUM |
5.3 |
MEDIUM |
5.3 |
2010-04-28 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |