Published: 06/10/2014 Updated: 07/10/2014

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-site request forgery (CSRF) vulnerability in Jolokia prior to 1.2.1 allows remote malicious users to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jolokia jolokia 1.0.2
jolokia jolokia 1.0.1
jolokia jolokia 1.0.0
jolokia jolokia 1.1.5
jolokia jolokia 1.1.0
jolokia jolokia 1.0.5
jolokia jolokia 1.0.3
jolokia jolokia 1.1.4
jolokia jolokia 1.1.3
jolokia jolokia 1.1.2
jolokia jolokia 1.1.1
jolokia jolokia
jolokia jolokia 1.0.6
jolokia jolokia 1.0.4

It was found that Jolokia was vulnerable to Cross-Site Request Forgery (CSRF) attacks A remote attacker could provide a specially crafted web page that, when visited by a user logged in to Jolokia, could allow the attacker to execute arbitrary methods on MBeans exposed via JMX ...

CWE-352 http://rhn.redhat.com/errata/RHSA-2014-1351.html https://github.com/rhuss/jolokia/commit/2d9b168cfbbf5a6d16fa6e8a5b34503e3dc42364 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-0168

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-0168

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect