CVE-2010-3878 in JBoss Enterprise Application Platform
Сводка (Английский)
Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Резервировать
08.10.2010
Раскрытие
30.12.2010
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 55896 | Red Hat JBoss Enterprise Application Platform 4.3.0.CP09 подделка межсайтовых запросов | 352 | Не определено | Официальное исправление | CVE-2010-3878 |