Update CVE-2018-1000130.yaml
parent
aa3e6b24a7
commit
65eb0fc1fe
|
@ -4,7 +4,8 @@ info:
|
|||
name: Jolokia Agent - JNDI Code Injection
|
||||
author: milo2012
|
||||
severity: high
|
||||
description: Jolokia agent is vulnerable to a JNDI injection vulnerability that allows a remote attacker to run arbitrary Java code on the server when the agent is in proxy mode.
|
||||
description: |
|
||||
Jolokia agent is vulnerable to a JNDI injection vulnerability that allows a remote attacker to run arbitrary Java code on the server when the agent is in proxy mode.
|
||||
reference:
|
||||
- https://jolokia.org/#Security_fixes_with_1.5.0
|
||||
- https://access.redhat.com/errata/RHSA-2018:2669
|
||||
|
@ -35,9 +36,9 @@ requests:
|
|||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "Failed to retrieve RMIServer stub: javax.naming.CommunicationException: 127.0.0.1:1389"
|
||||
part: body
|
||||
|
||||
- type: status
|
||||
status:
|
||||
|
|
Loading…
Reference in New Issue