CVE-2007-1036
EXPLOITED RANSOMWAREJBoss Application Server - Unauthenticated Administrative Access via Default Configuration
Title source: llmExploitation Summary
CVE-2007-1036 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.
EIP tracks 4 public exploits from researchers including Metasploit, jduck, Patrick Hof, h0ng10, Patrick Hof, Jens Liebchen, h0ng10, including a Metasploit module exploits/multi/http/jboss_maindeployer.
AI-analyzed exploit summary This Metasploit module exploits CVE-2007-1036 in JBoss servers by leveraging exposed JMX Invoker servlets to deploy a malicious WAR file via the DeploymentFileRepository methods. It achieves remote code execution by uploading and executing a payload through a stager JSP.
Description
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.
Exploits (4)
This Metasploit module exploits CVE-2007-1036 in JBoss servers by leveraging exposed JMX Invoker servlets to deploy a malicious WAR file via the DeploymentFileRepository methods. It achieves remote code execution by uploading and executing a payload through a stager JSP.
This Metasploit module exploits CVE-2007-1036 by deploying a malicious WAR archive via the JBoss JMX Console's MainDeployer functionality. It achieves remote code execution by serving a WAR file containing a payload and triggering its deployment on the target server.
This Metasploit module exploits CVE-2007-1036 by deploying a malicious WAR archive via the JBoss JMX Console's MainDeployer functionality, achieving remote code execution. It includes automatic target detection and supports multiple platforms.
This Metasploit module exploits a JBoss JMXInvokerServlet vulnerability (CVE-2007-1036) to deploy a WAR file via the DeploymentFileRepository, achieving remote code execution on JBoss 4.x and 5.x servers. It uses a multi-stage approach with a JSP stager to upload and execute the payload.