VulnerabilityAnalyzed

CVE-2010-0738

Red Hat JBoss Authentication Bypass Vulnerability

KEVEXPLOIT ×4 ✓MEDIUM 5.3EPSS 73.8%

Does this matter?

Known to be exploited in the wild (CISA KEV, CISA remediation deadline 15 June 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.

Description

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS: 73.81% probability · 99th percentile
Public exploits: 4 in Exploit-DB · verified · first 3 August 2010
CISA KEV: Listed 25 May 2022 · due 15 June 2022 · used in ransomware campaigns
Weakness: CWE-749
Affected: redhat/jboss enterprise application platform
Source: secalert@redhat.com

EPSS trend

EPSS moved from 74.7% on 16 October 2026 to 73.8% on 30 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.

CISA notes

Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2010-0738

Public exploits (4)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-ID	Title	Type	Published	Verified
EDB-17924 source ↗	JBoss & JMX Console - Misconfigured Deployment Scannerjsp · y0ug	webapps	3 October 2011	no
EDB-16274 source ↗	JBoss Application Server 4.2 < 4.2.0.CP09 / 4.3 < 4.3.0.CP08 - Remote Command Executionjsp · kingcope	webapps	4 March 2011	yes
EDB-16319 source ↗	JBoss JMX - Console Beanshell Deployer WAR Upload and Deployment (Metasploit)multiple · Metasploit	remote	10 January 2011	yes
EDB-16316 source ↗	JBoss - Java Class DeploymentFileRepository WAR Deployment (Metasploit)multiple · Metasploit	remote	3 August 2010	yes

References

http://marc.info/?l=bugtraq&m=132129312609324&w=2Exploit, Mailing List
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35Third Party Advisory
http://secunia.com/advisories/39563Broken Link, Vendor Advisory
http://securityreason.com/securityalert/8408Broken Link
http://securitytracker.com/id?1023918Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/39710Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/0992Broken Link, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=574105Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/58147Third Party Advisory, VDB Entry
https://rhn.redhat.com/errata/RHSA-2010-0376.htmlBroken Link
https://rhn.redhat.com/errata/RHSA-2010-0377.htmlBroken Link
https://rhn.redhat.com/errata/RHSA-2010-0378.htmlBroken Link
https://rhn.redhat.com/errata/RHSA-2010-0379.htmlVendor Advisory
http://marc.info/?l=bugtraq&m=132129312609324&w=2Exploit, Mailing List
http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35Third Party Advisory
http://secunia.com/advisories/39563Broken Link, Vendor Advisory
http://securityreason.com/securityalert/8408Broken Link
http://securitytracker.com/id?1023918Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/39710Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/0992Broken Link, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=574105Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/58147Third Party Advisory, VDB Entry
https://rhn.redhat.com/errata/RHSA-2010-0376.htmlBroken Link
https://rhn.redhat.com/errata/RHSA-2010-0377.htmlBroken Link
https://rhn.redhat.com/errata/RHSA-2010-0378.htmlBroken Link
https://rhn.redhat.com/errata/RHSA-2010-0379.htmlVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0738US Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.