{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2010-1428/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2010-1428/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2010-1428/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2010-1428/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2010-1428/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2010-1428"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2010-1428"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2010/CVE-2010-1428.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2010-1428\n\ninfo:\n  name: Red Hat JBoss - Web/JMX Console Access\n  author: Jayachandran from Securin Labs (https://securin.io)\n  severity: high\n  description: |\n    Red Hat JBoss Enterprise Application Platform (EAP) can expose the Web Console, JMX Console, and JMXInvokerServlet without authentication, allowing remote attackers to reach admin dashboards and interact with MBeans, leading to full server compromise.\n  impact: |\n    Attackers can retrieve sensitive information by bypassing access controls, leading to information disclosure.\n  remediation: |\n    Restrict access to /web-console, /jmx-console and /invoker, and enforce authentication on the JBoss management interfaces.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2010-1428\n    - https://access.redhat.com/security/cve/CVE-2010-1428\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 7.5\n    cve-id: CVE-2010-1428\n    epss-score: 0.52654\n    epss-percentile: 0.98972\n    cwe-id: CWE-306\n  metadata:\n    verified: false\n    max-request: 3\n    vendor: redhat\n    product: jboss_enterprise_application_platform\n    shodan-query:\n      - http.html:\"/jmx-console/\"\n      - http.title:\"jboss\"\n      - cpe:\"cpe:2.3:a:redhat:jboss_enterprise_application_platform\"\n    fofa-query: 'title=\"JBoss\" && body=\"/jmx-console/\"'\n  tags: cve,cve2010,jboss,redhat,unauth,exposure,auth-bypass,kev,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/jmx-console/\"\n\n    matchers-condition: and\n    matchers:\n      - type: status\n        status:\n          - 200\n\n      - type: word\n        part: body\n        words:\n          - \"JMX Agent View\"\n          - \"jboss.system:type\"\n          - \"HtmlAdaptor?action\"\n        condition: or\n\n  - method: GET\n    path:\n      - \"{{BaseURL}}/web-console/\"\n      - \"{{BaseURL}}/web-console/ServerInfo.jsp\"\n\n    stop-at-first-match: true\n    matchers-condition: and\n    matchers:\n      - type: status\n        status:\n          - 200\n\n      - type: word\n        part: body\n        words:\n          - \"JBoss Management Console\"\n          - \"org.jboss.console\"\n        condition: or\n\n  - method: GET\n    path:\n      - \"{{BaseURL}}/invoker/JMXInvokerServlet\"\n\n    matchers-condition: and\n    matchers:\n      - type: status\n        status:\n          - 200\n\n      - type: word\n        part: header\n        words:\n          - \"application/x-java-serialized-object\"\n# digest: 4a0a0047304502202331bfb34b998273c6533fa9201c61bfaa64257c6b76698327c5fdf12dded15f022100b1bf3fff5614ad97b3984420216016431a6bade8f38f97833538404d7c6afa0e:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2010-1428"
}