CVE-2010-0738
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 28, 2010
Updated: Jan 6, 2025
Summary
CVE-2010-0738 is a vulnerability affecting the JMX-Console web application in Red Hat JBoss Enterprise Application Platform (JBoss EAP or JBEAP) versions 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08. The issue lies in the application's access control, which restricts GET and POST methods only. This allows remote attackers to bypass this restriction and send malicious requests to the application's GET handler using alternative methods, potentially leading to unauthorized access or data manipulation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Red Hat Jboss Enterprise Application Platform
Affected Vendors
- Red Hat