Jolokia 1.2.0

CPE Details

Jolokia 1.2.0
jolokia
jolokia
1.2.0
2019-07-29
11h42 +00:00
2019-07-29
11h42 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:jolokia:jolokia:1.2.0:*:*:*:*:*:*:*

Informations

Vendor

jolokia

Product

jolokia

Version

1.2.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-10899 2019-08-01 11h27 +00:00 A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.
8.8
High
CVE-2014-0168 2014-10-06 12h00 +00:00 Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
6.8