Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-06-15. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
🚨 CVE-2010-1428 - high 🚨 Red Hat JBoss - Web/JMX Console Access > Red Hat JBoss Enterprise Application Platform (EAP) can expose the Web Console, JMX C... 👾 https://cloud.projectdiscovery.io/library/CVE-2010-1428 @pdnuclei #NucleiTemplates #cve
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | jboss_enterprise_application_platform | 4.2.0 | - | - |
| App | redhat | jboss_enterprise_application_platform | 4.3.0 | - | - |