{"schema":"threatline.record/2","record":{"id":"CVE-2010-0738","aliases":[],"summary":"Red Hat JBoss Authentication Bypass Vulnerability","details":"The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.","categories":["Operating systems"],"product":"JBoss","vendor":"Red Hat","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2010-0738","source_modified_at":"2026-10-01T19:23:44.440Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}],"defaultStatus":null}],"fixed_versions":[],"cvss":3.7,"severity":"Low","kev":{"listed":true,"date_added":"2022-05-25","due_date":"2022-06-15","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Known"},"epss":{"probability":0.74722,"percentile":0.99505,"score_date":"2026-10-23"},"published_at":"2010-04-28T22:00:00.000Z","modified_at":"2026-10-01T19:23:44.440Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2010-0738","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-01T19:23:44.440Z"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/jboss_bshdeployer.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":null},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_bshdeployer.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2010-04-26"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_maindeployer.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2007-02-20"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/jboss_deploymentfilerepository.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":null},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_deploymentfilerepository.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2010-04-26"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/jboss_vulnscan.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":null},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/sap/sap_icm_urlscan.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":null},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/17924","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2011-10-03"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/16316","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2010-08-03"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/16274","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2011-03-04"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/16319","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2011-01-10"},{"source":"Nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0738.yaml","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":null},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2010-0738","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Metasploit","Exploit-DB","Nuclei","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0738","source":"CISA KEV"},{"source":"CVE List","url":"https://rhn.redhat.com/errata/RHSA-2010-0379.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"source":"CVE List","url":"https://rhn.redhat.com/errata/RHSA-2010-0378.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"source":"CVE List","url":"https://bugzilla.redhat.com/show_bug.cgi?id=574105","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://rhn.redhat.com/errata/RHSA-2010-0376.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"source":"CVE List","url":"https://rhn.redhat.com/errata/RHSA-2010-0377.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"source":"CVE List","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/58147","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0738","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"partial","assessed_at":"2026-08-14T03:56:02.748183Z"},"exploits":[{"source":"Metasploit","kind":"Auxiliary module","name":"JBoss JMX Console Beanshell Deployer WAR Upload and Deployment","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/jboss_bshdeployer.rb","date":null,"added":"2025-05-16","check":false},{"source":"Metasploit","kind":"Exploit module","name":"JBoss JMX Console Beanshell Deployer WAR Upload and Deployment","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_bshdeployer.rb","date":"2010-04-26","added":"2025-12-17","check":false},{"source":"Metasploit","kind":"Exploit module","name":"JBoss JMX Console Deployer Upload and Execute","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_maindeployer.rb","date":"2007-02-20","added":"2026-03-11","check":false},{"source":"Metasploit","kind":"Auxiliary module","name":"JBoss JMX Console DeploymentFileRepository WAR Upload and Deployment","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/jboss_deploymentfilerepository.rb","date":null,"added":"2025-05-16","check":false},{"source":"Metasploit","kind":"Exploit module","name":"JBoss Java Class DeploymentFileRepository WAR Deployment","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_deploymentfilerepository.rb","date":"2010-04-26","added":"2025-12-17","check":false},{"source":"Metasploit","kind":"Auxiliary module","name":"JBoss Vulnerability Scanner","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/jboss_vulnscan.rb","date":null,"added":"2026-04-02","check":false},{"source":"Metasploit","kind":"Auxiliary module","name":"SAP URL Scanner","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/sap/sap_icm_urlscan.rb","date":null,"added":"2026-04-02","check":false},{"source":"Exploit-DB","kind":"Webapps exploit","name":"JBoss & JMX Console - Misconfigured Deployment Scanner","url":"https://www.exploit-db.com/exploits/17924","date":"2011-10-03","added":"2011-10-03","verified":false},{"source":"Exploit-DB","kind":"Remote exploit","name":"JBoss - Java Class DeploymentFileRepository WAR Deployment (Metasploit)","url":"https://www.exploit-db.com/exploits/16316","date":"2010-08-03","added":"2010-08-03","verified":true},{"source":"Exploit-DB","kind":"Webapps exploit","name":"JBoss Application Server 4.2 < 4.2.0.CP09 / 4.3 < 4.3.0.CP08 - Remote Command Execution","url":"https://www.exploit-db.com/exploits/16274","date":"2011-03-04","added":"2011-03-04","verified":true},{"source":"Exploit-DB","kind":"Remote exploit","name":"JBoss JMX - Console Beanshell Deployer WAR Upload and Deployment (Metasploit)","url":"https://www.exploit-db.com/exploits/16319","date":"2011-01-10","added":"2011-01-10","verified":true},{"source":"Nuclei","kind":"Scanner template","name":"JBoss JMX/Web Console - Authentication Bypass via HTTP Verb Tampering","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0738.yaml"}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-01T19:23:44.440Z","content_hash":"a070d26ea45443d2dcb9d66064240ec7dd8f5913df73c002dc2de54980140e9e"}}