349 matches found
CVE-2017-18108
The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection...
Design/Logic Flaw
The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection...
CVE-2017-18108
The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection...
CVE-2017-18108
CVE-2017-18108 affects Atlassian Crowd prior to version 2.10.2. The administration SMTP configuration resource contains a JNDI injection vulnerability that allows remote attackers with administration rights to execute arbitrary code. Impact: arbitrary code execution with admin privileges; CVSS3 b...
Jolokia Vulnerabilities - RCE & XSS(CVE-2018-1000130,CVE-2018-1000129)
Recently, during a client engagement, Gotham Digital Science found a couple of zero-day vulnerabilities in the Jolokia service. Jolokia is an open source product that provides an HTTP API interface for JMX Java Management Extensions technology. It contains an API we can use for calling MBeans...
CVE-2018-1000130
A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server...
CVE-2018-1000130
A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server...
CVE-2018-1000130
A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server...
CVE-2018-1000130
The CVE-2018-1000130 entry documents a JNDI-injection vulnerability in Jolokia agent 1.3.7 when used in proxy mode, allowing remote code execution on the server. Affected component: Jolokia agent (proxy mode); root cause: JNDI code injection (CWE-74 per Red Hat advisory). Impact: remote code exec...