CVE-2010-0738

Red Hat JBoss JMX-Console allowed remote attackers to bypass authentication by exploiting incomplete access control on non-GET/POST HTTP methods.

The JMX-Console web application in Red Hat JBoss Enterprise Application Platform only enforced access control for GET and POST methods, allowing attackers to send requests using other methods to bypass authentication. This is a critical, actively exploited vulnerability linked to ransomware attacks, meaning DIB organizations using JBoss must immediately patch or replace the component to prevent unauthorized access and potential data exfiltration or system compromise.

Shame score — A critical, actively exploited vulnerability in a widely deployed enterprise platform that was linked to ransomware attacks, demonstrating severe negligence in patching and access control implementation.