CWE Code: 352
Vulnerability Type: privilege_escalation
CVSS Score: 7.6
CWE Name:  Cross-Site Request Forgery (CSRF)
Summary: cross-site request forgery (csrf) vulnerability in jmx-console/htmladaptor in jboss allows remote attackers to perform privileged actions as administrators via certain mbean operations, a different vulnerability than cve-2006-3733. affected product versions unspecified.
Access Authentication: NONE
Access Complexity: HIGH
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2007-03-02
Last Modified Date: 2018-10-16