WaratekVRT Sign in

CVE-2010-1428 JBoss Enterprise Application Platform

Affected softwareJBoss Enterprise Application Platform
Severity7.5 High CVSS 3.1 3 scores
WeaknessExposed dangerous method or function (CWE-749)
Published28 Apr 2010
Updated2 Oct 2026

Description

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

Exploitation status

Exploited

Confirmed real-world exploitation.
  • CISA KEV listed Confirmed exploitation in the wild. Added 2022-05-25 · remediation due 2022-06-15 · ransomware use: known
  • VulnCheck KEV listed Exploitation reported in the wild. 7 citations · earliest 2016-03-25.
  • CISA Vulnrichment exploitation: active CISA records active exploitation. Automatable: no, technical impact: partial.
  • Indexed PoC 1 indexed Published artifacts you can open, in Nuclei.
  • EPSS 53% chance in 30 days A model's forecast, not a report of exploitation. Higher than 99% of all scored CVEs.

VulnCheck KEV

Exploitation evidence from VulnCheck Known Exploited Vulnerabilities (VulnCheck KEV), used under VulnCheck's community terms. View CVE-2010-1428 in VulnCheck (free account), which lists 2 more citations not shown here.

EvidenceSourceDetailDate
Reported exploitation nsarchive.gwu.edu /sites/default/files/documents/5986978/National-Security-Archive-Department-of-Justice.pdf 2016-03-25
Reported exploitation tenable.com /blog/samsam-ransomware-how-to-identify-and-mitigate-the-risk 2018-03-28
Reported exploitation news.sophos.com /en-us/2018/05/02/shutting-out-samsam-ransomware 2018-05-02
Reported exploitation securonix.com /securonix-threat-research-samsam-ransomware-detection-using-security-analytics 2018-05-15
Reported exploitation web.archive.org /web/20220227045141/https://risksense.com/wp-content/uploads/2019/09/RiskSense-Spotlight-Report-Ransomware.pdf 2019-09-01
IndexArtifactStarsFirst seen
Nuclei Red Hat JBoss - Web/JMX Console Access

Waratek protection

Outside Waratek scope

A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.

  • Protection none
  • Action not pursued none
  • Review human Researcher
  • Record active
Decided by Manual classification of this CVE in the legacy dataset
Finding A manual classification set this CVE's status to Outside Waratek scope, but the CVE names a tracked product.

CVSS

7.5 HIGH v3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 3 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N NVD Primary published
CVSS 3.1 5.9 MEDIUM CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CISA-ADP Secondary
CVSS 2.0 5.0 none AV:N/AC:L/Au:N/C:P/I:N/A:N NVD Primary

Affected software and releases

Products and versions

1 product, 2 version entries
SourceVendorProductSchemeAffected versions
nvd redhat jboss enterprise application platform generic 4.2.0 · 4.3.0

References

URLTags
http://marc.info/?l=bugtraq&m=132698550418872&w=2 Exploit, Mailing List
http://secunia.com/advisories/39563 Broken Link, Vendor Advisory
http://securitytracker.com/id?1023917 Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/39710 Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/0992 Broken Link, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=585899 Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/58148 Third Party Advisory, VDB Entry
https://rhn.redhat.com/errata/RHSA-2010-0376.html Broken Link, Vendor Advisory
https://rhn.redhat.com/errata/RHSA-2010-0377.html Broken Link
https://rhn.redhat.com/errata/RHSA-2010-0378.html Broken Link

Timeline
Published2010-04-28By the CVE Program.
VulnCheck KEV: earliest evidence2016-03-25Date of the oldest evidence of exploitation in VulnCheck KEV's record. VulnCheck does not publish the date it listed the CVE.
Added to CISA KEV2022-05-25Listed in CISA's Known Exploited Vulnerabilities catalog.
VulnCheck KEV: latest evidence2022-05-25Date of the newest report, exploit reference or honeypot sighting in VulnCheck KEV's record.
NVD record modified2026-10-02NVD's own last-modified date for this record.