CVE-2007-1036 - CVE House
Back to Database
Status published High CVE-2007-1036

The default configuration of JBoss does not restrict access to...

Vulnerability Description

The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1036

Credits & Attribution

No credits recorded in the NVD database.

References

More from jboss

View All →
CVE-2016-8656
Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to...
High 7
CVE-2016-2094
The HTTPS NIO Connector allows remote attackers to cause a...
High 7.5
CVE-2012-3428
The IronJacamar container before 1.0.12.Final for JBoss Application Server, when...
Medium 4.3
CVE-2008-3273
JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03,...
Medium 5
CVE-2007-6433
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam...
High 7.5

Affected Vendor

Affected Software

jboss application server
Vulnerable Versions:
Unknown

Timeline

Official Publish: February 21st, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.