Red Hat JBoss - Web/JMX Console Access
CVE-2010-1428
Early Release
Description
Red Hat JBoss Enterprise Application Platform (EAP) can expose the Web Console, JMX Console, and JMXInvokerServlet without authentication, allowing remote attackers to reach admin dashboards and interact with MBeans, leading to full server compromise.
Severity
High
CVSS Score
7.5
Exploit Probability
61%
Affected Product
jboss_enterprise_application_platform
Published Date
October 25, 2026
Template Author
jayachandran from securin labs (https://securin.io)
CVE-2010-1428.yaml
7.5Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2010-1428
CWE ID:
cwe-306
Remediation Steps
Restrict access to /web-console, /jmx-console and /invoker, and enforce authentication on the JBoss management interfaces.