Beveiligingsadvies

CVE-2017-2594

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-05-08 17:00:00
Laatst bijgewerkt 2024-08-05 14:02:06
Toegewezen door redhat
CVSS-score 5.4
Status PUBLISHED

Beschrijving

hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root.