Description

Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.

Remediation

References

CVE-2010-3878

Related Vulnerabilities

Jboss EAP Incorrect Authorization Vulnerability (CVE-2017-12196)

Envoy Proxy Excessive Iteration Vulnerability (CVE-2021-39204)

Opencart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-21518)

XWiki Incorrect Authorization Vulnerability (CVE-2024-38369)

MySQL Configuration Vulnerability (CVE-2012-5613)

Severity

Medium

Classification

CVE-2010-3878 CWE-352

Tags

Missing Update Known Vulnerabilities