CVE-2014-0168

Published: Oct 6, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

Affected (14)

Products: Jolokia: Jolokia

Jolokia

1 product

Jolokia

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Jolokia Jolokia	Up to 1.2.0
Jolokia Jolokia	Version 1.0.0
Jolokia Jolokia	Version 1.0.1
Jolokia Jolokia	Version 1.0.2
Jolokia Jolokia	Version 1.0.3
Jolokia Jolokia	Version 1.0.4
Jolokia Jolokia	Version 1.0.5
Jolokia Jolokia	Version 1.0.6
Jolokia Jolokia	Version 1.1.0
Jolokia Jolokia	Version 1.1.1
Jolokia Jolokia	Version 1.1.2
Jolokia Jolokia	Version 1.1.3
Jolokia Jolokia	Version 1.1.4
Jolokia Jolokia	Version 1.1.5