Red Hat Security Advisory

RHSA-2010:0378

JBoss Enterprise Application Platform 4.2.0.CP09 update

Released 2010-04-27 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 5 Server hibernate3-1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5, hibernate3-annotations-3.3.1-1.12.GA_CP03.ep1.el5, hibernate3-annotations-javadoc-3.3.1-1.12.GA_CP03.ep1.el5 +14

Fixes 3 records

TI-2010-01383 CVE-2010-1428 · GHSA-vcwg-4772-7rvx

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application…

CRITICAL 90KEV

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST met…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.52654 Published 2010-04-28 Fixed CWE-749

TI-2010-00705 CVE-2010-0738 · GHSA-72pp-v9jm-c6xj

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application…

HIGH 81KEV

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST metho…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.73815 Published 2010-04-28 Fixed CWE-749

TI-2010-01384 CVE-2010-1429 · GHSA-x26p-67q3-4mfx

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before…

MEDIUM 55

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request t…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.53728 Published 2010-04-28 Fixed CWE-264