CVE-2010-1428

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Apr 28, 2010
Updated: Jan 6, 2025

Summary

CVE-2010-1428 is a vulnerability affecting the Web Console, or web-console, in Red Hat JBoss Enterprise Application Platform (JBoss EAP or JBEAP) versions 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08. This issue permits remote attackers to access sensitive information by exploiting the fact that the console performs access control only for GET and POST methods. Other request methods are not protected, leading to potential information leakage.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Red Hat Jboss Enterprise Application Platform

Affected Vendors

  • Red Hat

Advisories, Assessments, and Mitigations