Summary
JBoss Enterprise Application Platform is prone to multiple vulnerabilities, including an information-disclosure issue and multiple authentication-bypass issues.
An attacker can exploit these issues to bypass certain security restrictions to obtain sensitive information or gain unauthorized access to the application.
Solution
Updates are available. Please see the references for details.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2010-0738, CVE-2010-1428, CVE-2010-1429 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities
- Apache Tomcat Partial HTTP Requests DoS Vulnerability (Windows)
- Acritum Femitter Server URI Directory Traversal Vulnerability
- JBoss Enterprise Application Platform Multiple Vulnerabilities
- IIS 5.0 Sample App reveals physical path of web root
- IBM WebSphere Application Server JNDI information disclosure Vulnerability