Логотип exploitDog
bind:CVE-2010-1428
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2010-1428

Количество 5

Количество 5

redhat логотип

CVE-2010-1428

почти 16 лет назад

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

CVSS2: 5
EPSS: Средний
nvd логотип

CVE-2010-1428

почти 16 лет назад

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

CVSS3: 7.5
EPSS: Средний
debian логотип

CVE-2010-1428

почти 16 лет назад

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterpri ...

CVSS3: 7.5
EPSS: Средний
github логотип

GHSA-vcwg-4772-7rvx

почти 4 года назад

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

CVSS3: 7.5
EPSS: Средний
fstec логотип

BDU:2022-05191

почти 16 лет назад

Уязвимость методов GET и POST платформы JBoss Enterprise Application Platform, позволяющая нарушителю получить конфиденциальную информацию

CVSS3: 5.3
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2010-1428

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

CVSS2: 5
65%
Средний
почти 16 лет назад
nvd логотип
CVE-2010-1428

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

CVSS3: 7.5
65%
Средний
почти 16 лет назад
debian логотип
CVE-2010-1428

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterpri ...

CVSS3: 7.5
65%
Средний
почти 16 лет назад
github логотип
GHSA-vcwg-4772-7rvx

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

CVSS3: 7.5
65%
Средний
почти 4 года назад
fstec логотип
BDU:2022-05191

Уязвимость методов GET и POST платформы JBoss Enterprise Application Platform, позволяющая нарушителю получить конфиденциальную информацию

CVSS3: 5.3
65%
Средний
почти 16 лет назад

Уязвимостей на страницу