Lucene search
+L

1 matches found

OSV
OSV
added 2023/11/28 4:15 p.m.6 views

UBUNTU-CVE-2022-41678

Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...

8.8CVSS7.1AI score0.8581EPSS
SaveExploits2References6
Rows per page
Query Builder