Unscored CVE-2007-1157 EUVD-2007-1154GHSA-r86m-hxp8-3mvw

Cross-site request forgery (CSRF) vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform privileged actions a…

Published Feb 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform privileged actions as administrators via certain MBean operations, a different vulnerability than CVE-2006-3733.

References

33142 vdb-entry
jboss-jmxconsole-csrf(32673) vdb-entry
20070222 JBoss jmx-console CSRF mailing-list
20070223 Re: JBoss jmx-console CSRF mailing-list