Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-06-15. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
🚨 CVE-2010-0738 - critical 🚨 JBoss JMX/Web Console - Authentication Bypass via HTTP Verb Tampering > JBoss EAP 4.2 (before 4.2.0.CP09) and 4.3 (before 4.3.0.CP08) only enforce authentica... 👾 https://cloud.projectdiscovery.io/library/CVE-2010-0738 @pdnuclei #NucleiTemplate...
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | jboss_enterprise_application_platform | 4.2.0 | - | - |
| App | redhat | jboss_enterprise_application_platform | 4.3.0 | - | - |