NVD

Id
12960  
Name
CVE-2010-1428  
Description
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-04-28  
Modified Date
2012-11-05  
Seq
2010-1428  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
71753 12960 CVE-2010-1428 HPSBMU02736  View
71754 12960 CVE-2010-1428 1023917  View
71755 12960 CVE-2010-1428 39710  View
71756 12960 CVE-2010-1428 ADV-2010-0992  View
71757 12960 CVE-2010-1428 jboss-webconsole-information-disclosure(58148)  View
71758 12960 CVE-2010-1428 https://bugzilla.redhat.com/show_bug.cgi?id=585899  View
71759 12960 CVE-2010-1428 RHSA-2010:0376  View
71760 12960 CVE-2010-1428 RHSA-2010:0377  View
71761 12960 CVE-2010-1428 RHSA-2010:0378  View
71762 12960 CVE-2010-1428 RHSA-2010:0379  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39615 JVNDB-2010-005400 Red Hat JBoss Enterprise Application Platform の JBossAs における重要な情報を取得される脆弱性 Red Hat JBoss Enterprise Application Platform の JBossAs の Web Console は、GET および POST メソッドのみに対してアクセスコントロールを実行するため、重要な情報を取得される脆弱性が存在します。 CVE-2010-1428 44008 CVE-2010-1428 12960 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005400.html 2010-04-27 2012-12-20 View