NVD

Id
12283  
Name
CVE-2010-0738  
Description
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application"s GET handler by using a different method.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-04-28  
Modified Date
2015-01-22  
Seq
2010-0738  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
67604 12283 CVE-2010-0738 SSRT100244  View
67605 12283 CVE-2010-0738 http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35  View
67606 12283 CVE-2010-0738 8408  View
67607 12283 CVE-2010-0738 1023918  View
67608 12283 CVE-2010-0738 39710  View
67609 12283 CVE-2010-0738 ADV-2010-0992  View
67610 12283 CVE-2010-0738 jboss-jmxconsole-security-bypass(58147)  View
67611 12283 CVE-2010-0738 https://bugzilla.redhat.com/show_bug.cgi?id=574105  View
67612 12283 CVE-2010-0738 RHSA-2010:0376  View
67613 12283 CVE-2010-0738 RHSA-2010:0377  View
67614 12283 CVE-2010-0738 RHSA-2010:0378  View
67615 12283 CVE-2010-0738 RHSA-2010:0379  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39503 JVNDB-2010-005288 Red Hat JBoss Enterprise Application Platform の JBossAs におけるリクエストを送信される脆弱性 Red Hat JBoss Enterprise Application Platform の JBossAs の JMX-Console Web アプリケーションは、GET および POST メソッド対してのみアクセスコントロールを実行するため、JMX-Console Web アプリケーションの GET ハンドラへのリクエストを送信される脆弱性が存在します。 CVE-2010-0738 43318 CVE-2010-0738 12283 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005288.html 2010-04-27 2012-12-20 View