CVE-2010-0737
published 2019-10-30CVE-2010-0737: A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to…
PriorityP340high8CVSS 3.1
AVAACLPRLUINSUCHIHAH
EPSS
0.53%
41.4th percentile
A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| red_hat | jboss | — | — |
| redhat | jboss_operations_network | < 2.3.1 | 2.3.1 |
CVSS provenance
nvdv3.18.0HIGHCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.05.2MEDIUMAV:A/AC:L/Au:S/C:P/I:P/A:P
vendor_redhat8.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
JBoss ON CLI privilege escalation
vendor_redhat·2010-03-18·CVSS 8.0
CVE-2010-0737 [HIGH] JBoss ON CLI privilege escalation
JBoss ON CLI privilege escalation
A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user.
Statement: This issue was fixed by a patch to JBoss Operations Network 2.3.1, available for download from the Red Hat Customer Portal: https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=1983&product=em&version=2.3.1&downloadType=securityPatches
GHSA
GHSA-25q7-6x5v-rx9h: A missing permission check was found in The CLI in JBoss Operations Network before 2
ghsa_unreviewed·2022-04-21
CVE-2010-0737 [HIGH] CWE-732 GHSA-25q7-6x5v-rx9h: A missing permission check was found in The CLI in JBoss Operations Network before 2
A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user.
Suricata
GPL WEB_SERVER viewcode access
suricata·2010-09-23
CVE-1999-0737 GPL WEB_SERVER viewcode access
GPL WEB_SERVER viewcode access
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"GPL WEB_SERVER viewcode access"; flow:established,to_server; http.uri; content:"/viewcode"; reference:cve,1999-0737; reference:nessus,10576; reference:nessus,12048; classtype:web-application-attack; sid:2101403; rev:13; metadata:created_at 2010_09_23, cve CVE_1999_0737, signature_severity Unknown, updated_at 2024_03_08;)
No public exploits indexed.
2019-10-30
Published