CVE-2010-1428

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

53% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-25)

CISA KEV

listed 2022-05-25, due 2022-06-15, known ransomware use

CWE

CWE-749

Published

2010-04-28

Modified

2026-10-02

Record from

the NVD, synced 2026-10-19

Affected

• redhat:jboss_enterprise_application_platform

References

• http://marc.info/?l=bugtraq&m=132698550418872&w=2
• http://secunia.com/advisories/39563
• http://securitytracker.com/id?1023917
• http://www.securityfocus.com/bid/39710
• http://www.vupen.com/english/advisories/2010/0992

Check your stackJSON