{
  "cvss": 0.0,
  "datePublished": "2011-04-19T00:00:00Z",
  "dateUpdated": "2011-04-19T00:00:00Z",
  "description": "The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.",
  "dueDate": "",
  "id": "CVE-2007-1036",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Known",
  "product": "JBoss",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "CRITICAL",
  "source": "vulncheck_kev",
  "title": "JBoss Direct Request Security Bypass",
  "vendor": "jboss"
}