VULNERABILITY INTELLIGENCE
CVE-2007-1036
CVSS score7.5 HIGH
EPSS probability82.26%
CISA KEVNot currently listed
Published2007-02-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.