CVE-2010-0738

Katalog CVE

CVSS 5.3 · Medium KEV · sudah dieksploitasi Dipakai ransomware EPSS 79,6%

Kerentanan Exposed Dangerous Method or Function pada redhat jboss enterprise application platform. Skor CVSS 3.1 5.3 (Medium) menurut NVD. Masuk katalog KEV CISA pada 25 Mei 2022, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

Rincian

Terbit di NVD

28 April 2010

Terakhir diubah

2 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-749: Exposed Dangerous Method or Function

EPSS (30 hari)

79,6% peluang dieksploitasi; lebih tinggi dari 99,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Red Hat JBoss Authentication Bypass Vulnerability

Masuk KEV

25 Mei 2022

Tenggat CISA

15 Juni 2022 (untuk instansi federal AS)

Ransomware

Tercatat dipakai dalam kampanye ransomware

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://secunia.com/advisories/39563 broken link · advisory vendor
• http://www.vupen.com/english/advisories/2010/0992 broken link · advisory vendor
• https://rhn.redhat.com/errata/RHSA-2010-0379.html advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0738 pemerintah AS
• http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35 advisory pihak ketiga
• http://securitytracker.com/id?1023918 broken link · advisory pihak ketiga · vdb entry
• http://www.securityfocus.com/bid/39710 broken link · advisory pihak ketiga · vdb entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58147 advisory pihak ketiga · vdb entry
• http://marc.info/?l=bugtraq&m=132129312609324&w=2 exploit · mailing list
• http://securityreason.com/securityalert/8408 broken link
• https://bugzilla.redhat.com/show_bug.cgi?id=574105 issue tracking
• https://rhn.redhat.com/errata/RHSA-2010-0376.html broken link
• https://rhn.redhat.com/errata/RHSA-2010-0377.html broken link
• https://rhn.redhat.com/errata/RHSA-2010-0378.html broken link