CVE ID:	CVE-2010-0738
Description:	The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0738 1023918 http://securitytracker.com/id?1023918 39563 http://secunia.com/advisories/39563 39710 http://www.securityfocus.com/bid/39710 8408 http://securityreason.com/securityalert/8408 ADV-2010-0992 http://www.vupen.com/english/advisories/2010/0992 HPSBMU02714 http://marc.info/?l=bugtraq&m=132129312609324&w=2 RHSA-2010:0376 https://rhn.redhat.com/errata/RHSA-2010-0376.html RHSA-2010:0377 https://rhn.redhat.com/errata/RHSA-2010-0377.html RHSA-2010:0378 https://rhn.redhat.com/errata/RHSA-2010-0378.html RHSA-2010:0379 https://rhn.redhat.com/errata/RHSA-2010-0379.html SSRT100244 http://marc.info/?l=bugtraq&m=132129312609324&w=2 http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35 http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35 https://bugzilla.redhat.com/show_bug.cgi?id=574105 https://bugzilla.redhat.com/show_bug.cgi?id=574105 jboss-jmxconsole-security-bypass(58147) https://exchange.xforce.ibmcloud.com/vulnerabilities/58147