CVE-2015-5182

CVE-2015-5182 is a CSRF vulnerability in the jolokia API of Red Hat JBoss A-MQ (ActiveMQ-based). The connected documents specify that an authenticated user could be tricked by visiting a malicious page, causing the user’s session to perform unintended actions via the jolokia interface (CSRF). The...

CVE-2015-5182

Cross-site request forgery CSRF vulnerability in the jolokia API in A-MQ...

PT-2017-6825 · Apache · A-Mq

Name of the Vulnerable Software and Affected Versions: A-MQ affected versions not specified Description: The issue is related to a cross-site request forgery CSRF vulnerability in the jolokia API. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...

Apache ActiveMQ Web Console Cross-Site Scripting Vulnerability

Apache ActiveMQ is a popular messaging and integration model provider . Apache ActiveMQ 5.0.0 - 5.13.1 Multiple cross-site scripting vulnerabilities exist in the Web Management Console and in Java memory dumps due to incorrect user data output validation and improper privilege settings within...

activemq -- Web Console Cross-Site Scripting

Vladimir Ivanov Positive Technologies reports: Several instances of cross-site scripting vulnerabilities were identified to be present in the web based administration console as well as the ability to trigger a Java memory dump into an arbitrary folder. The root cause of these issues are improper...

CVE-2014-0168

Cross-site request forgery CSRF vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page...

CVE-2014-0168

CVE-2014-0168 corresponds to a CSRF vulnerability in Jolokia prior to 1.2.1. The issue allows remote attackers to hijack user authentication and cause execution of MBeans methods via a crafted web page. Affected product: Jolokia (before 1.2.1). Root cause: Cross-site request forgery in the Joloki...

CVE-2014-0168

Cross-site request forgery CSRF vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page...