{"cvss":0.0,"datePublished":"2016-03-25T00:00:00Z","dateUpdated":"2016-03-25T00:00:00Z","description":"Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.","dueDate":"2022-06-15T00:00:00Z","id":"CVE-2010-1428","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"JBoss","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"vulncheck_kev","title":"Red Hat JBoss Information Disclosure Vulnerability","vendor":"Red Hat"}