7.5high
CVE-2007-1036in critical feed4 exploits
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attac…
Published 19 y ago · modified 4 mo ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
82.3%
percentile 100%
Public exploits
4
Metasploit · Exploit-DB
Summary
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.
Exploit prediction (EPSS)
82.26% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.
Exploits and detections
- Metasploit exploit/multi/http/jboss_maindeployer JBoss JMX Console Deployer Upload and Execute · metasploit exploit, excellent rank · 2007-02-20
- Metasploit exploit/multi/http/jboss_invoke_deploy JBoss DeploymentFileRepository WAR Deployment (via JMXInvokerServlet) · metasploit exploit, excellent rank · 2007-02-20
- EDB-21080 JBoss - DeploymentFileRepository WAR Deployment (via JMXInvokerServlet) (Metasploit) · remote · 2012-09-05
- EDB-16318 JBoss JMX - Console Deployer Upload and Execute (Metasploit) · remote · 2010-10-19
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-264 Permissions, Privileges, and Access Controls
References
- wiki.jboss.org /wiki/Wiki.jsp?page=SecureJBoss · x_refsource_MISC, x_transferred
- securitytracker.com /id?1017677 · vdb-entry, x_refsource_SECTRACK, x_transferred
- wiki.jboss.org /wiki/Wiki.jsp?page=SecureTheJmxConsole · x_refsource_MISC, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/32596 · vdb-entry, x_refsource_XF, x_transferred
- kb.cert.org /vuls/id/632656 · third-party-advisory, x_refsource_CERT-VN, x_transferred
- securityfocus.com /archive/1/460597/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- osvdb.org /33744 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityfocus.com /archive/1/460605/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /archive/1/460695/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
Sources
- CVE List: CVE-2007-1036
- NVD: CVE-2007-1036
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.