CVE-2010-0738Used in ransomware
Red Hat JBoss
Red Hat JBoss Authentication Bypass Vulnerability
What it is
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Red Hat entries on the list
- Automatic Bug Reporting Tool Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CVE-2015-5287 · Aug 26, 2026
- Libuser Red Hat Libuser Race Condition Vulnerability CVE-2015-3246 · Aug 26, 2026
- JBoss RichFaces Framework Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability CVE-2018-14667 · Sep 28, 2023
- Polkit Red Hat Polkit Incorrect Authorization Vulnerability CVE-2021-3560 · May 12, 2023
- Polkit Red Hat Polkit Out-of-Bounds Read and Write Vulnerability CVE-2021-4034 · Jun 27, 2022
- JBoss Red Hat JBoss Information Disclosure Vulnerability CVE-2010-1428 · May 25, 2022