Veille CVE
CVE-2010-1428
7.5 Élevée Exploitée activement Utilisée par des rançongicielsCatalogue CISA KEV — Red Hat JBoss Information Disclosure Vulnerability
Ajoutée le 25/05/2022 · Échéance de correction (agences US) : 15/06/2022
Action requise : Apply updates per vendor instructions.
Description
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.5 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | 5.9 Moyenne | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 2.0 | 5.0 Moyenne | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Faiblesses (CWE)
Références
- http://marc.info/?l=bugtraq&m=132698550418872&w=2 ExploitMailing List
- http://secunia.com/advisories/39563 Broken LinkVendor Advisory
- http://securitytracker.com/id?1023917 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/39710 Broken LinkThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2010/0992 Broken LinkVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=585899 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58148 Third Party AdvisoryVDB Entry
- https://rhn.redhat.com/errata/RHSA-2010-0376.html Broken LinkVendor Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0377.html Broken Link
- https://rhn.redhat.com/errata/RHSA-2010-0378.html Broken Link
- https://rhn.redhat.com/errata/RHSA-2010-0379.html Vendor Advisory
- http://marc.info/?l=bugtraq&m=132698550418872&w=2 ExploitMailing List
- http://secunia.com/advisories/39563 Broken LinkVendor Advisory
- http://securitytracker.com/id?1023917 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/39710 Broken LinkThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2010/0992 Broken LinkVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=585899 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58148 Third Party AdvisoryVDB Entry
- https://rhn.redhat.com/errata/RHSA-2010-0376.html Broken LinkVendor Advisory
- https://rhn.redhat.com/errata/RHSA-2010-0377.html Broken Link
- https://rhn.redhat.com/errata/RHSA-2010-0378.html Broken Link
- https://rhn.redhat.com/errata/RHSA-2010-0379.html Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-1428 Broken Link