4.3
CVE-2010-3878
- EPSS 0.14%
- Published 30.12.2010 21:00:01
- Last modified 11.04.2025 00:51:21
- Source secalert@redhat.com
- Teams watchlist Login
- Open Login
Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.
Data is provided by the National Vulnerability Database (NVD)
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0 Updatecp01
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0 Updatecp02
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0 Updatecp03
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0 Updatecp04
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0 Updatecp05
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0 Updatecp06
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0 Updatecp07
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0 Updatecp08
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.14% | 0.3 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.