CVE-2010-0738

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

• CWE-749

• http://marc.info/?l=bugtraq&m=132129312609324&w=2Exploit, Mailing List
• http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35Third Party Advisory
• http://secunia.com/advisories/39563Broken Link, Vendor Advisory
• http://securityreason.com/securityalert/8408Broken Link
• http://securitytracker.com/id?1023918Broken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/39710Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2010/0992Broken Link, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=574105Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58147Third Party Advisory, VDB Entry
• https://rhn.redhat.com/errata/RHSA-2010-0376.htmlBroken Link
• https://rhn.redhat.com/errata/RHSA-2010-0377.htmlBroken Link
• https://rhn.redhat.com/errata/RHSA-2010-0378.htmlBroken Link
• https://rhn.redhat.com/errata/RHSA-2010-0379.htmlVendor Advisory
• http://marc.info/?l=bugtraq&m=132129312609324&w=2Exploit, Mailing List
• http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35Third Party Advisory
• http://secunia.com/advisories/39563Broken Link, Vendor Advisory
• http://securityreason.com/securityalert/8408Broken Link
• http://securitytracker.com/id?1023918Broken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/39710Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2010/0992Broken Link, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=574105Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58147Third Party Advisory, VDB Entry
• https://rhn.redhat.com/errata/RHSA-2010-0376.htmlBroken Link
• https://rhn.redhat.com/errata/RHSA-2010-0377.htmlBroken Link
• https://rhn.redhat.com/errata/RHSA-2010-0378.htmlBroken Link
• https://rhn.redhat.com/errata/RHSA-2010-0379.htmlVendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0738US Government Resource

Published

Apr 28, 2010

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0732gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-scre…
• CVE-2010-0733Integer overflow in src/backend/executor/nodeHash.c in Postg…
• CVE-2010-0734content_encoding.c in libcurl 7.10.5 through 7.19.7, when zl…
• CVE-2010-0735Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-0736Cross-site scripting (XSS) vulnerability in the view_queryfo…
• CVE-2010-0737A missing permission check was found in The CLI in JBoss Ope…8
• CVE-2010-0739Integer overflow in the predospecial function in dospecial.c…
• CVE-2010-0740The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.…
• CVE-2010-0741The virtio_net_bad_features function in hw/virtio-net.c in t…
• CVE-2010-0742The Cryptographic Message Syntax (CMS) implementation in cry…
• CVE-2010-0743Multiple format string vulnerabilities in isns.c in (1) Linu…
• CVE-2010-0744aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL i…