CVE-2017-2617

概要

参考情報

• securityfocus.com/bid/96036 · Third Party Advisory
• access.redhat.com/errata/RHSA-2018:0319 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

hawtio のその他の脆弱性

• CVE-2023-33544中 5.5hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after de…
• CVE-2019-9827緊急 9.8Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitra…
• CVE-2017-2589緊急 9.0It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies ar…
• CVE-2017-2594高 7.5hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerE…
• CVE-2014-0121緊急 9.8The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k paramet…