Design/Logic Flaw

2023-04-2821:15:00

PRIOn knowledge base

www.prio-n.com

talend studio

logic flaw

microservices

unauthenticated access

jolokia

jvm

remote access

nvd

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.3%

JSON

In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow unauthenticated access to the Jolokia endpoint of the microservice. This allows for remote access to the JVM via the Jolokia JMX-HTTP bridge.

CPENameOperatorVersion
studioge8.0.0
studiolt8.0.1
studioeq< 7.3.1r202210

Name	Operator	Version
studio	ge	8.0.0
studio	lt	8.0.1
studio	eq	< 7.3.1r202210

References

talend.com

www.talend.com/security/incident-response/