Vulnerability in N/a
CVE-2007-1036
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.
EPSS: 0.901 (99.6th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- wiki.jboss.org/wiki/Wiki.jsp (x_refsource_MISC)
- 1017677 (vdb-entry, x_refsource_SECTRACK)
- wiki.jboss.org/wiki/Wiki.jsp (x_refsource_MISC)
- jboss-admin-unauth-access(32596) (vdb-entry, x_refsource_XF)
- VU#632656 (x_refsource_CERT-VN, third-party-advisory)
- 20070220 Jboss vulnerability (mailing-list, x_refsource_BUGTRAQ)
- 33744 (x_refsource_OSVDB, vdb-entry)
- 20070220 Re: Jboss vulnerability (mailing-list, x_refsource_BUGTRAQ)
- 20070220 Re: Jboss vulnerability (mailing-list, x_refsource_BUGTRAQ)
Frequently asked questions
- What is CVE-2007-1036?
- CVE-2007-1036 is a vulnerability in N/a. Published 2007-02-21.
- Is CVE-2007-1036 known to be exploited?
- 16 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.