CVEvulnerability
CVE-2010-3878
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-12-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.
Affected configurations
• redhat jboss enterprise application platform 4.3.0
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://securitytracker.com/id?1024813 securitytracker.com
- http://www.redhat.com/support/errata/RHSA-2010-0937.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0938.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0939.html Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=604617 bugzilla.redhat.com
- http://securitytracker.com/id?1024813 securitytracker.com
- http://www.redhat.com/support/errata/RHSA-2010-0937.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0938.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0939.html Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=604617 bugzilla.redhat.com