Description

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.

Remediation

References

https://access.redhat.com/errata/RHSA-2018:2669

https://jolokia.org/#Security_fixes_with_1.5.0

Related Vulnerabilities

CVE-2022-43411 Vulnerability in maven package org.jenkins-ci.plugins:gitlab-plugin

CVE-2016-10538 Vulnerability in maven package org.webjars.npm:cli

CVE-2021-23400 Vulnerability in npm package nodemailer

CVE-2020-7673 Vulnerability in npm package node-extend

CVE-2018-16459 Vulnerability in npm package exceljs

Severity

Critical

Classification

CWE-74 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory Release Notes Vendor Advisory