Summary
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
- Vendor
- Red Hat
- Product
- JBoss
- Added to KEV
- May 25, 2022
- Remediation due
- Jun 15, 2022 (US federal deadline)
- Ransomware use
- Known
- Weakness
- CWE-264
- EPSS
- 73.8% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References