{"id":"CVE-2010-0738","kind":"vulnerability","aliases":["CVE-2010-0738"],"related":[],"title":"Red Hat JBoss: Red Hat JBoss Authentication Bypass Vulnerability","description":"The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.","summary":"The JMX-Console web application in Red Hat JBoss Enterprise Application Platform only enforces access control on GET and POST requests. A remote attacker can reach its GET handler by sending the same request with a different HTTP method and skip the login check.","severity":"high","cvss":5.3,"epss":0.74722,"exploited":true,"exploited_at":"2022-05-25T00:00:00+00:00","products":[{"name":"Red Hat JBoss","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","java","jboss","ransomware","red-hat-jboss-eap","runtime","self-hosted"],"not_affected_if":["jmx-console-removed","not-jboss"],"how_to_check":null,"fix":"Apply the Red Hat JBoss updates per vendor instructions (CISA required action); the specific fixed version is unknown from these sources.\nRestrict or remove the jmx-console web application if it is not needed.","status":"open","published_at":"2010-04-28T22:30:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:15:32+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-23T21:15:32Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Red Hat JBoss updates per vendor instructions (CISA required action); the specific fixed version is unknown from these sources.\nRestrict or remove the jmx-console web application if it is not needed.","reach":"internet","impact":"high","summary":"The JMX-Console web application in Red Hat JBoss Enterprise Application Platform only enforces access control on GET and POST requests. A remote attacker can reach its GET handler by sending the same request with a different HTTP method and skip the login check.","category":"runtime","who_cares":["jboss","red-hat-jboss-eap","java","self-hosted"],"confidence":0.6,"needs_auth":"no","worst_case":"Unauthenticated remote attackers reach JMX-Console administrative functions, possibly enabling server takeover","analyst_note":"Find the affected and fixed JBoss EAP versions and the vendor advisory for CVE-2010-0738 (Red Hat security data page) and a detection command for the jmx-console deployment; sources give neither.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["jmx-console-removed","not-jboss"],"user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000502,"input_tokens":2862,"output_tokens":431,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0738':12A,15A '-2010':11A,14A '4.2':97C '4.2.0':99C '4.3':102C '4.3.0':104C 'access':47B,107C 'aka':92C 'allow':117C 'applic':37B,43B,82C,90C,125C 'attack':56B,119C 'authent':7A 'bypass':8A 'check':76B 'consol':35B,80C 'control':48B,108C 'cp08':105C 'cp09':100C 'cve':10A,13A 'differ':69B,132C 'eap':27B,94C 'enforc':46B 'enterpris':42B,89C 'exploit':19B 'get':50B,60B,112C,127C 'handler':61B,128C 'hat':2A,5A,17A,25B,40B,87C 'host':31B 'http':70B 'java':20B 'jbeap':96C 'jboss':3A,6A,18A,21B,26B,41B,88C,93C 'jbossa':84C 'jmx':34B,79C 'jmx-consol':33B,78C 'login':75B 'method':71B,115C,133C 'perform':106C 'platform':44B,91C 'post':52B,114C 'ransomwar':22B 'reach':58B 'red':1A,4A,16A,24B,39B,86C 'red-hat-jboss-eap':23B 'remot':55B,118C 'request':53B,66B,122C 'runtim':28B 'self':30B 'self-host':29B 'send':63B,121C 'skip':73B 'use':130C 'vulner':9A 'web':36B,81C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2010-04-28T22:30:00+00:00","kev":{"dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2010-0738","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0738","severity":null,"published_at":"2022-05-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T19:35:24+00:00","note":null},{"source":"epss","external_id":"CVE-2010-0738","url":"https://api.first.org/data/v1/epss?cve=CVE-2010-0738","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2010-0738","url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0738","severity":null,"published_at":"2010-04-28T22:30:00+00:00","modified_at":"2026-10-02T14:55:30+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}