CVE-2010-1428 - Red Hat JBoss

AI Vulnerability Context

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

Overview

A source-backed snapshot of this vulnerability.

CISA KEVyesWhether CISA lists this as exploited.

Techniques0AI attack methods connected to this vulnerability.

Case studies0Examples where this vulnerability is mentioned.

Vulnerability status

How serious this vulnerability is and whether it is known to be exploited.

CISA KEVHIGH

CVE ID: CVE-2010-1428
Vendor/project: Red Hat
Product: JBoss
Vulnerability name: Red Hat JBoss Information Disclosure Vulnerability
Date added: 2022-05-25
Due date: 2022-06-15
Known ransomware campaign use: Known
CVSS v3: 7.5

CWE-264

Exploit context

What the vulnerability is about.

No description available. The source record only contains identifiers and metadata.

Source evidence

Original public records and references for this page.

View all sources →

Original source

Original source links

Open the public records and source datasets used for this page.