CVEvulnerability
CVE-2007-1036
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-02-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.
Affected configurations
• jboss jboss application server
Related
Weakness · not in database (1)
References
- http://osvdb.org/33744 osvdb.org
- http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureJBoss wiki.jboss.org
- http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureTheJmxConsole wiki.jboss.org
- http://www.kb.cert.org/vuls/id/632656 US Government Resource
- http://www.securityfocus.com/archive/1/460597/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/460605/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/460695/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id?1017677 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32596 exchange.xforce.ibmcloud.com
- http://osvdb.org/33744 osvdb.org
- http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureJBoss wiki.jboss.org
- http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureTheJmxConsole wiki.jboss.org
- http://www.kb.cert.org/vuls/id/632656 US Government Resource
- http://www.securityfocus.com/archive/1/460597/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/460605/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/460695/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id?1017677 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32596 exchange.xforce.ibmcloud.com