CVE-2018-1000130 | BDVDB-2026-97929 Detail

Description#

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jolokia.org/#Security_fixes_with_1.5.0
https://access.redhat.com/errata/RHSA-2018:2669

Exploit#

No public exploit known

History#

Version 12018-03-14Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.