CVE-2017-2594 | BDVDB-2026-100427 Detail

Description#

hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-05-08Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.