NVD

Id
53244  
Name
CVE-2007-1036  
Description
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-21  
Modified Date
2009-03-16  
Seq
2007-1036  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269556 53244 CVE-2007-1036 http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureJBoss  View
269557 53244 CVE-2007-1036 http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureTheJmxConsole  View
269558 53244 CVE-2007-1036 VU#632656  View
269559 53244 CVE-2007-1036 20070220 Re: Jboss vulnerability  View
269560 53244 CVE-2007-1036 20070220 Jboss vulnerability  View
269561 53244 CVE-2007-1036 20070220 Re: Jboss vulnerability  View
269562 53244 CVE-2007-1036 1017677  View
269563 53244 CVE-2007-1036 jboss-admin-unauth-access(32596)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54710 JVNDB-2007-003402 JBoss のディフォルト設定における管理アクセス権を取得される脆弱性 JBoss のデフォルト設定は、(1) コンソールおよび (2) Web 管理インターフェースへのアクセス制限をしないため、認証を回避される、および管理アクセス権を取得される脆弱性が存在します。 CVE-2007-1036 24391 CVE-2007-1036 53244 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003402.html 2007-02-21 2012-09-25 View