3 matches found
EUVD-2022-0940
Malicious code in bioql PyPI...
6.5CVSS6.8AI score0.01876EPSS
SaveExploits0References4
CVE-2020-11980
In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a "viewer" role. In the 'etc/jmx.acl.cfg', such as role c...
6.5CVSS2.8AI score0.01876EPSS
SaveExploits0References3
CVE-2020-11980
In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a "viewer" role. In the 'etc/jmx.acl.cfg', such as role c...
6.4AI score0.01876EPSS
SaveExploits0References1
20