CVE-2010-3878

Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
VendorProductVersion
redhatjboss_enterprise_application_platform
4.3.0
redhatjboss_enterprise_application_platform
4.3.0:cp01
redhatjboss_enterprise_application_platform
4.3.0:cp02
redhatjboss_enterprise_application_platform
4.3.0:cp03
redhatjboss_enterprise_application_platform
4.3.0:cp04
redhatjboss_enterprise_application_platform
4.3.0:cp05
redhatjboss_enterprise_application_platform
4.3.0:cp06
redhatjboss_enterprise_application_platform
4.3.0:cp07
redhatjboss_enterprise_application_platform
4.3.0:cp08
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
jbossas4
disco
dne
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
ignored
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
ignored
oneiric
ignored
natty
ignored
maverick
ignored
lucid
ignored
karmic
ignored
hardy
ignored
dapper
dne
Common Weakness Enumeration
References
http://securitytracker.com/id?1024813
http://www.redhat.com/support/errata/RHSA-2010-0937.html
http://www.redhat.com/support/errata/RHSA-2010-0938.html
http://www.redhat.com/support/errata/RHSA-2010-0939.html
https://bugzilla.redhat.com/show_bug.cgi?id=604617
http://securitytracker.com/id?1024813
http://www.redhat.com/support/errata/RHSA-2010-0937.html
http://www.redhat.com/support/errata/RHSA-2010-0938.html
http://www.redhat.com/support/errata/RHSA-2010-0939.html
https://bugzilla.redhat.com/show_bug.cgi?id=604617