All CVE records

CVE-2010-0738 — Red Hat JBoss Authentication Bypass Vulnerability

Known ransomware use CISA KEV listed Added May 25, 2022 Remediate by June 15, 2022

Description

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2010-0738

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer