CVE-2023-33247: Missing Authentication for Critical Function

Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog serv...

PT-2010-5134

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform versions prior to 4.3.0.CP09 Description A cross-site request forgery CSRF issue exists in the JMX Console of the affected software, allowing remote attackers to hijack the authentication of...

CVE-2010-3878: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files...