Lucene search
RedhatCVE-2014-0168HistoryOct 06, 2014 - 2:55 p.m.
CVE-2014-0168
2014-10-0614:55:08
CWE-352
redhat
web.nvd.nist.gov
41
cve
2014
0168
csrf
vulnerability
jolokia
remote attackers
authentication
mbeans
web page
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8.8
Confidence
High
EPSS
0.002
Percentile
55.7%
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
Affected configurations
Node
jolokiajolokiaRange≤1.2.0
ORjolokiajolokiaMatch1.0.0
ORjolokiajolokiaMatch1.0.1
ORjolokiajolokiaMatch1.0.2
ORjolokiajolokiaMatch1.0.3
ORjolokiajolokiaMatch1.0.4
ORjolokiajolokiaMatch1.0.5
ORjolokiajolokiaMatch1.0.6
ORjolokiajolokiaMatch1.1.0
ORjolokiajolokiaMatch1.1.1
ORjolokiajolokiaMatch1.1.2
ORjolokiajolokiaMatch1.1.3
ORjolokiajolokiaMatch1.1.4
ORjolokiajolokiaMatch1.1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jolokia | jolokia | * | cpe:2.3:a:jolokia:jolokia:*:*:*:*:*:*:*:* |
| jolokia | jolokia | 1.0.0 | cpe:2.3:a:jolokia:jolokia:1.0.0:*:*:*:*:*:*:* |
| jolokia | jolokia | 1.0.1 | cpe:2.3:a:jolokia:jolokia:1.0.1:*:*:*:*:*:*:* |
| jolokia | jolokia | 1.0.2 | cpe:2.3:a:jolokia:jolokia:1.0.2:*:*:*:*:*:*:* |
| jolokia | jolokia | 1.0.3 | cpe:2.3:a:jolokia:jolokia:1.0.3:*:*:*:*:*:*:* |
| jolokia | jolokia | 1.0.4 | cpe:2.3:a:jolokia:jolokia:1.0.4:*:*:*:*:*:*:* |
| jolokia | jolokia | 1.0.5 | cpe:2.3:a:jolokia:jolokia:1.0.5:*:*:*:*:*:*:* |
| jolokia | jolokia | 1.0.6 | cpe:2.3:a:jolokia:jolokia:1.0.6:*:*:*:*:*:*:* |
| jolokia | jolokia | 1.1.0 | cpe:2.3:a:jolokia:jolokia:1.1.0:*:*:*:*:*:*:* |
| jolokia | jolokia | 1.1.1 | cpe:2.3:a:jolokia:jolokia:1.1.1:*:*:*:*:*:*:* |
Related
osv
osv
Cross-Site Request Forgery in Jolokia
2022-05-17 04:31:39
prion
prion
Cross site request forgery (csrf)
2014-10-06 14:55:00
cvelist
cvelist
CVE-2014-0168
2014-10-06 14:00:00
nvd
nvd
CVE-2014-0168
2014-10-06 14:55:08
github
github
Cross-Site Request Forgery in Jolokia
2022-05-17 04:31:39
redhat
redhat
(RHSA-2014:1351) Important: Red Hat JBoss Fuse/A-MQ 6.1.0 security update
2014-10-01 18:06:06
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8.8
Confidence
High
EPSS
0.002
Percentile
55.7%
Related for CVE-2014-0168