CVE-2010-1428 : Red Hat JBoss Information Disclosure Vulnerability
Cette vulnérabilité (CVE-2010-1428, score CVSS 9.0) affecte JBoss et est exploitable à distance via le réseau (sans accès physique ni local) sans aucune authentification préalable (Pré-Auth). Contexte : Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET […]