HackerFeeds
All CVEs

CVE-2010-0738

MEDIUM5.3
CISA KEV

Published 2010-04-28 · Updated 2026-10-02 · Source secalert@redhat.com

Summary

CVE-2010-0738 is a medium-severity (CVSS 5.3) vulnerability in Red Hat JBoss. CISA added it to the Known Exploited Vulnerabilities catalog on May 25, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by June 15, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. Red Hat has 9 vulnerabilities in the KEV catalog, 4 of them linked to ransomware.

All 9 known-exploited Red Hat vulnerabilities →

Description

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-749

CISA Known-Exploited Vulnerability

Product: Red Hat — JBoss

Name: Red Hat JBoss Authentication Bypass Vulnerability

Date added: 2022-05-25 · Due: 2022-06-15

USED IN RANSOMWARE

Required action: Apply updates per vendor instructions.

References

View on NVD