Update CVE-2018-1000130.yaml

patch-1
Prince Chaddha 2022-06-20 21:25:26 +05:30 committed by GitHub
parent aa3e6b24a7
commit 65eb0fc1fe
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions

View File

@ -4,7 +4,8 @@ info:
name: Jolokia Agent - JNDI Code Injection
author: milo2012
severity: high
description: Jolokia agent is vulnerable to a JNDI injection vulnerability that allows a remote attacker to run arbitrary Java code on the server when the agent is in proxy mode.
description: |
Jolokia agent is vulnerable to a JNDI injection vulnerability that allows a remote attacker to run arbitrary Java code on the server when the agent is in proxy mode.
reference:
- https://jolokia.org/#Security_fixes_with_1.5.0
- https://access.redhat.com/errata/RHSA-2018:2669
@ -35,9 +36,9 @@ requests:
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Failed to retrieve RMIServer stub: javax.naming.CommunicationException: 127.0.0.1:1389"
part: body
- type: status
status: