3 matches found
CVE-2022-41678: Improper Authentication
Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...
8.8CVSS7.7AI score0.8581EPSS
SaveExploits2References2
20