VulnerabilityModified
CVE-2010-3878
Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that…
MEDIUM 4.3EPSS 0.87%
Does this matter?
Lower severity and a low EPSS score (0.87%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 0.87% probability · 57th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- redhat/jboss enterprise application platform
- Source
- secalert@redhat.com
References
- http://securitytracker.com/id?1024813
- http://www.redhat.com/support/errata/RHSA-2010-0937.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0938.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0939.htmlVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=604617
- http://securitytracker.com/id?1024813
- http://www.redhat.com/support/errata/RHSA-2010-0937.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0938.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0939.htmlVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=604617
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.