Vulnerability Details CVE-2010-3878
Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.1%
CVSS Severity
CVSS v2 Score 4.3
References
- http://securitytracker.com/id?1024813
- http://www.redhat.com/support/errata/RHSA-2010-0937.html
- http://www.redhat.com/support/errata/RHSA-2010-0938.html
- http://www.redhat.com/support/errata/RHSA-2010-0939.html
- https://bugzilla.redhat.com/show_bug.cgi?id=604617
- http://securitytracker.com/id?1024813
- http://www.redhat.com/support/errata/RHSA-2010-0937.html
- http://www.redhat.com/support/errata/RHSA-2010-0938.html
- http://www.redhat.com/support/errata/RHSA-2010-0939.html
- https://bugzilla.redhat.com/show_bug.cgi?id=604617
Products affected by CVE-2010-3878
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0