CVE-2017-2594

CVE-2017-2594 is a path-traversal vulnerability in hawtio prior to versions 2.0-beta-1, 2.0-beta-2, 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 that can lead to a NullPointerException with a full stacktrace. The flaw allows an attacker to access sensitive information from hawtio’s root by exploiting improper...

CVE-2017-2594

It was found that a path traversal vulnerability in hawtio leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root...