CVE-2010-3878

EUVD-2010-3856
Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
Affected Products (NVD)
VendorProductVersion
redhatjboss_enterprise_application_platform
4.3.0
redhatjboss_enterprise_application_platform
4.3.0:cp01
redhatjboss_enterprise_application_platform
4.3.0:cp02
redhatjboss_enterprise_application_platform
4.3.0:cp03
redhatjboss_enterprise_application_platform
4.3.0:cp04
redhatjboss_enterprise_application_platform
4.3.0:cp05
redhatjboss_enterprise_application_platform
4.3.0:cp06
redhatjboss_enterprise_application_platform
4.3.0:cp07
redhatjboss_enterprise_application_platform
4.3.0:cp08
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
jbossas4
artful
dne
bionic
dne
cosmic
dne
dapper
dne
disco
dne
hardy
ignored
karmic
ignored
lucid
ignored
maverick
ignored
natty
ignored
oneiric
ignored
precise
ignored
quantal
ignored
raring
ignored
saucy
ignored
trusty
dne
utopic
ignored
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
Common Weakness Enumeration
References
http://securitytracker.com/id?1024813
http://www.redhat.com/support/errata/RHSA-2010-0937.html
http://www.redhat.com/support/errata/RHSA-2010-0938.html
http://www.redhat.com/support/errata/RHSA-2010-0939.html
https://bugzilla.redhat.com/show_bug.cgi?id=604617
http://securitytracker.com/id?1024813
http://www.redhat.com/support/errata/RHSA-2010-0937.html
http://www.redhat.com/support/errata/RHSA-2010-0938.html
http://www.redhat.com/support/errata/RHSA-2010-0939.html
https://bugzilla.redhat.com/show_bug.cgi?id=604617