Test ID:	1.3.6.1.4.1.25623.1.0.100610
Category:	Web Servers
Title:	Red Hat JBoss Products Multiple Vulnerabilities (jmx-console) - Active Check
Summary:	Red Hat JBoss products are prone to multiple vulnerabilities,; including an information-disclosure issue and multiple authentication-bypass issues.
Description:	Summary: Red Hat JBoss products are prone to multiple vulnerabilities, including an information-disclosure issue and multiple authentication-bypass issues. Vulnerability Impact: An attacker can exploit these issues to bypass certain security restrictions to obtain sensitive information or gain unauthorized access to the application. Affected Software/OS: Red Hat JBoss Application Server (AS) as used by e.g. Red Hat JBoss Enterprise Application Platform (EAP). Solution: Updates are available. Please see the references for details. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0738 1023918 http://securitytracker.com/id?1023918 39563 http://secunia.com/advisories/39563 39710 http://www.securityfocus.com/bid/39710 8408 http://securityreason.com/securityalert/8408 ADV-2010-0992 http://www.vupen.com/english/advisories/2010/0992 HPSBMU02714 http://marc.info/?l=bugtraq&m=132129312609324&w=2 RHSA-2010:0376 https://rhn.redhat.com/errata/RHSA-2010-0376.html RHSA-2010:0377 https://rhn.redhat.com/errata/RHSA-2010-0377.html RHSA-2010:0378 https://rhn.redhat.com/errata/RHSA-2010-0378.html RHSA-2010:0379 https://rhn.redhat.com/errata/RHSA-2010-0379.html SSRT100244 http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35 https://bugzilla.redhat.com/show_bug.cgi?id=574105 jboss-jmxconsole-security-bypass(58147) https://exchange.xforce.ibmcloud.com/vulnerabilities/58147 Common Vulnerability Exposure (CVE) ID: CVE-2010-1428 1023917 http://securitytracker.com/id?1023917 HPSBMU02736 http://marc.info/?l=bugtraq&m=132698550418872&w=2 SSRT100699 https://bugzilla.redhat.com/show_bug.cgi?id=585899 jboss-webconsole-information-disclosure(58148) https://exchange.xforce.ibmcloud.com/vulnerabilities/58148 Common Vulnerability Exposure (CVE) ID: CVE-2010-1429 44009 https://www.exploit-db.com/exploits/44009/ https://bugzilla.redhat.com/show_bug.cgi?id=585900 jboss-status-servlet-information-disclosure(58149) https://exchange.xforce.ibmcloud.com/vulnerabilities/58149
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.