CVE coverage
View on NVD →
CVE-2010-0738
CVSS 5.3
Actively exploited (KEV)
6 detections found
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET WEB_SERVER JBoss jmx-console Probe | rev 4 | 2024-03-06 |
| suricata | ET WEB_SPECIFIC_APPS JBoss JMX Console Beanshell Deployer .WAR File Upload and Deployment Cross Site Request Forgery Attempt | rev 2 | 2024-01-03 |
| snort | ET WEB_SPECIFIC_APPS JBoss JMX Console Beanshell Deployer .WAR File Upload and Deployment Cross Site Request Forgery Attempt | rev 2 | 2024-01-03 |
| suricata | ET WEB_SPECIFIC_APPS Possible JBoss JMX Console Beanshell Deployer WAR Upload and Deployment Exploit Attempt | rev 6 | 2020-09-11 |
| snort | ET WEB_SERVER JBoss jmx-console Probe | rev 1 | 2011-12-10 |
| snort | ET WEB_SPECIFIC_APPS Possible JBoss JMX Console Beanshell Deployer WAR Upload and Deployment Exploit Attempt | rev 3 | 2010-12-04 |