CVE-2010-0737

High

Description

A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user.

SeverityHigh
CVSS8.0
Exploit probability—
ProductRedhat Jboss Operations Network
PublishedOct 30, 2019
First seenOct 30, 2019

How to fix

Update
  • redhat jboss_operations_network2.3.1 or later

Affected products

ProductAffected versionsFixed in
redhat jboss_operations_networkv < 2.3.12.3.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2010-0737 · Redhat Jboss Operations Network · Dark Radar