Access Restriction Bypass Affecting org.apache.karaf.webconsole:org.apache.karaf.webconsole.features Open this link in a new tab package, versions [,3.0.9) [4.0.0,4.0.9) [4.1.0, 4.1.1)


0.0
high
  • Attack Complexity

    High

  • Confidentiality

    High

  • Integrity

    High

  • Availability

    High

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • snyk-id

    SNYK-JAVA-ORGAPACHEKARAFWEBCONSOLE-72391

  • published

    20 Sep 2018

  • disclosed

    24 Mar 2017

  • credit

    Kevin Schmidt

Overview

org.apache.karaf.webconsole:org.apache.karaf.webconsole.features is a modern and polymorphic applications container.

Affected versions of this package are vulnerable to Access Restriction Bypass via the Gogo shell in the webconsole feature.

Remediation

Upgrade org.apache.karaf.webconsole:org.apache.karaf.webconsole.features to versions 3.0.9, 4.0.9, 4.1.1 or higher.