exploit/multi/http/jboss_maindeployer

weaponized

JBoss JMX Console Deployer Upload and Execute

view exploit source metasploittype exploitpublished 2007-02-20catalog metasploit
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2010-0738USmedium5.3OT criticalKEV
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access…
CVE-2007-1036UShigh7.5Exploit
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain ad…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan