CVE-2018-11787

Prior to Karaf 3.0.9, Karaf 4.0.9, and Karaf 4.1.1, HTTP endpoints published by Karaf features may also be published under the HTTP web root, in addition to the paths specifically configured by the installed feature. Authentication and access control rules may not cover this additional path,...

CVE-2018-11787

In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/console and requires authentication to access it. One part of the console is a Gogo shell/console that gives access to the command line console of Karaf via a Web...

PT-2018-10821

Name of the Vulnerable Software and Affected Versions Apache Karaf versions prior to 3.0.9 Apache Karaf versions prior to 4.0.9 Apache Karaf versions prior to 4.1.1 Description The issue affects the webconsole feature in Apache Karaf, specifically the Gogo shell/console. When the Pax Web Extender...