CVE-2014-0121

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• hawtio/hawtio commit 5289715 · Issue Tracking
• infocon.org/cons/SyScan/SyScan%202015%20Singapore/SyScan%202015%20Singapore%20presentations/SyScan15%20David%20Jorm%20-%20Finding%20and%20exploiting%20novel%20flaws%20in%20Java%20software.pdf · Issue Tracking

hawtio のその他の脆弱性

• CVE-2023-33544中 5.5hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after de…
• CVE-2019-9827緊急 9.8Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitra…
• CVE-2017-2589緊急 9.0It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies ar…
• CVE-2017-2617高 7.8hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a cra…
• CVE-2017-2594高 7.5hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerE…