CVE-2010-3878

Published: Dec 30, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.

Affected (9)

Products: Redhat: Jboss Enterprise Application Platform

Redhat

1 product

Jboss Enterprise Application Platform

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Application Platform	Version 4.3.0
Redhat Jboss Enterprise Application Platform	Version 4.3.0 cp01
Redhat Jboss Enterprise Application Platform	Version 4.3.0 cp02
Redhat Jboss Enterprise Application Platform	Version 4.3.0 cp03
Redhat Jboss Enterprise Application Platform	Version 4.3.0 cp04
Redhat Jboss Enterprise Application Platform	Version 4.3.0 cp05
Redhat Jboss Enterprise Application Platform	Version 4.3.0 cp06
Redhat Jboss Enterprise Application Platform	Version 4.3.0 cp07
Redhat Jboss Enterprise Application Platform	Version 4.3.0 cp08