Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-3708
HistoryDec 30, 2010 - 9:00 p.m.

CVE-2010-3708

2010-12-3021:00:01
CWE-20
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.113 Low

EPSS

Percentile

95.2%

JSON

The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.

Affected configurations

NVD
Node
redhatjboss_enterprise_application_platformMatch4.3.0
OR
redhatjboss_enterprise_application_platformMatch4.3.0cp01
OR
redhatjboss_enterprise_application_platformMatch4.3.0cp02
OR
redhatjboss_enterprise_application_platformMatch4.3.0cp03
OR
redhatjboss_enterprise_application_platformMatch4.3.0cp04
OR
redhatjboss_enterprise_application_platformMatch4.3.0cp05
OR
redhatjboss_enterprise_application_platformMatch4.3.0cp06
OR
redhatjboss_enterprise_application_platformMatch4.3.0cp07
OR
redhatjboss_enterprise_application_platformMatch4.3.0cp08
Node
redhatjboss_enterprise_soa_platformMatch4.2.0
OR
redhatjboss_enterprise_soa_platformMatch4.2.0cp01
OR
redhatjboss_enterprise_soa_platformMatch4.2.0cp02
OR
redhatjboss_enterprise_soa_platformMatch4.2.0cp03
OR
redhatjboss_enterprise_soa_platformMatch4.2.0cp04
OR
redhatjboss_enterprise_soa_platformMatch4.2.0cp05
OR
redhatjboss_enterprise_soa_platformMatch4.2.0tp02
OR
redhatjboss_enterprise_soa_platformMatch4.3.0
OR
redhatjboss_enterprise_soa_platformMatch4.3.0cp01
OR
redhatjboss_enterprise_soa_platformMatch4.3.0cp02
OR
redhatjboss_enterprise_soa_platformMatch4.3.0cp03
OR
redhatjboss_enterprise_soa_platformMatch4.3.0cp04

Related

ubuntucve 1
veracode 1
github 1
osv 1
prion 1
cve 1
cvelist 1
redhat 2
openvas 1
nessus 2
ubuntucve
ubuntucve
CVE-2010-3708
2010-12-30 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2020-04-10 00:50:35
github
github
Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP
2022-05-17 05:45:03
osv
osv
Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP
2022-05-17 05:45:03
prion
prion
Design/Logic Flaw
2010-12-30 21:00:00
cve
cve
CVE-2010-3708
2010-12-30 21:00:01
cvelist
cvelist
CVE-2010-3708
2010-12-30 20:00:00
redhat
redhat
(RHSA-2010:0938) Important: JBoss Enterprise Application Platform 4.3.0.CP09 update
2010-12-01 00:00:00
(RHSA-2010:0939) Important: JBoss Enterprise Application Platform 4.3.0.CP09 update
2010-12-01 18:48:05
openvas
openvas
Red Hat JBoss Enterprise Application Platform (EAP) <= 4.3.0 Multiple Vulnerabilities
2010-12-02 00:00:00
nessus
nessus
RHEL 4 : JBoss EAP (RHSA-2010:0937)
2013-01-24 00:00:00
RHEL 5 : JBoss EAP (RHSA-2010:0938)
2013-01-24 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.113 Low

EPSS

Percentile

95.2%

JSON
Related for NVD:CVE-2010-3708
ubuntucve1veracode1github1osv1prion1cve1cvelist1redhat2openvas1nessus2