io.hawt:hawtio-karaf-terminal@1.2-M26 vulnerabilities
-
latest version
1.5.12
-
latest non vulnerable version
-
first published
11 years ago
-
latest version published
4 years ago
-
licenses detected
- [1.2-M19,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the io.hawt:hawtio-karaf-terminal package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
io.hawt:hawtio-karaf-terminal is a HTML5 web console with some plugins for managing Java stuff Affected versions of this package are vulnerable to Improper Authentication. The admin terminal in did not require authentication, an attacker could execute arbitrary commands via the How to fix Improper Authentication? Upgrade |
[,1.2.3)
|
io.hawt:hawtio-karaf-terminal is a HTML5 web console with some plugins for managing Java stuff Affected versions of this package are vulnerable to Cross-site request forgery (CSRF). An attacker could hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running How to fix Cross-site request forgery (CSRF)? Upgrade |
[,1.2.3)
|