JBoss Enterprise Application Platform '/web-console' Authentication Bypass

Medium Nessus Plugin ID 46181


The remote web server is configured insecurely, leaving it vulnerable to security bypass attacks.


The version of JBoss Enterprise Application Platform (EAP) running on the remote host allows unauthenticated access to certain documents under the '/web-console' directory. This is due to a misconfiguration in 'web.xml' that only requires authentication for GET and POST requests. Specifying a different command such as HEAD, DELETE or PUT causes the default GET handler to be used without authentication.

A remote attacker can exploit this to obtain sensitive information without providing authentication.

This version of JBoss EAP likely has other vulnerabilities, though Nessus has not checked for those issues.


Upgrade to JBoss EAP version 4.2.0.CP09 / 4.3.0.CP08 or later.

See Also





Plugin Details

Severity: Medium

ID: 46181

File Name: jboss_eap_jmx_console_auth_bypass.nasl

Version: $Revision: 1.14 $

Type: remote

Family: Web Servers

Published: 2010/04/29

Modified: 2014/11/14

Dependencies: 23842

Risk Information

Risk Factor: Medium


Base Score: 5

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:redhat:jboss_enterprise_application_platform

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2010/04/26

Vulnerability Publication Date: 2010/04/26

Reference Information

CVE: CVE-2010-1428

BID: 39710

OSVDB: 64172

Secunia: 39563