Description
A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.
Remediation
References
https://access.redhat.com/errata/RHSA-2018:2669
https://jolokia.org/#Security_fixes_with_1.5.0
Related Vulnerabilities
CVE-2022-45693 Vulnerability in maven package org.codehaus.jettison:jettison
CVE-2020-6457 Vulnerability in maven package org.webjars.npm:electron
CVE-2019-10095 Vulnerability in maven package org.apache.zeppelin:zeppelin
CVE-2021-41165 Vulnerability in maven package org.webjars.npm:ckeditor4
CVE-2022-25167 Vulnerability in maven package org.apache.flume.flume-ng-sources:flume-jms-source