CVE-2007-1036

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

81.77%

Published

Feb 21, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBJBoss - DeploymentFileRepository WAR Deployment (via JMXInvokerServlet) (Metasploit)Exploit-DBJBoss JMX - Console Deployer Upload and Execute (Metasploit)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.

Weaknesses (CWE)

CWE-264

Affected Products (1)

jboss · jboss_application_servervulnerable

References (18)

http://osvdb.org/33744

http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureJBoss

http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureTheJmxConsole

http://www.kb.cert.org/vuls/id/632656

US Government Resource

http://www.securityfocus.com/archive/1/460597/100/0/threaded

http://www.securityfocus.com/archive/1/460605/100/0/threaded

http://www.securityfocus.com/archive/1/460695/100/0/threaded

http://www.securitytracker.com/id?1017677

https://exchange.xforce.ibmcloud.com/vulnerabilities/32596