Lucene search
HistoryApr 28, 2023 - 9:15 p.m.
CVE-2023-31444
talend studio
security vulnerability
unauthenticated access
jolokia endpoint
remote access
jvm
jolokia jmx-http
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
52.3%
In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow unauthenticated access to the Jolokia endpoint of the microservice. This allows for remote access to the JVM via the Jolokia JMX-HTTP bridge.
Affected configurations
Node
talendstudioRange<7.3.1-r2022-10
ORtalendstudioRange8.0.0–8.0.1-r2022-09
Related
prion
prion
Design/Logic Flaw
2023-04-28 21:15:00
cvelist
cvelist
CVE-2023-31444
2023-04-28 00:00:00
cve
cve
CVE-2023-31444
2023-04-28 21:15:09
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
52.3%
Related for NVD:CVE-2023-31444