CVE-2014-0168: CSRF
Published Oct 6, 2014
·Updated
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
Affected Software
14 affected components
Jolokia Jolokia<=1.2.0
Jolokia Jolokia=1.0.0
Jolokia Jolokia=1.0.1
Jolokia Jolokia=1.0.2
Jolokia Jolokia=1.0.3
Jolokia Jolokia=1.0.4
Jolokia Jolokia=1.0.5
Jolokia Jolokia=1.0.6
Jolokia Jolokia=1.1.0
Jolokia Jolokia=1.1.1
Jolokia Jolokia=1.1.2
Jolokia Jolokia=1.1.3
Jolokia Jolokia=1.1.4
Jolokia Jolokia=1.1.5
Event History
Oct 6, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-0168?
CVE-2014-0168 is classified as a moderate severity cross-site request forgery vulnerability.
2
How do I fix CVE-2014-0168?
To fix CVE-2014-0168, upgrade Jolokia to version 1.2.1 or later.
3
What versions are affected by CVE-2014-0168?
CVE-2014-0168 affects Jolokia versions from 1.0.0 to 1.2.0, inclusive.
4
What type of vulnerability is CVE-2014-0168?
CVE-2014-0168 is a cross-site request forgery (CSRF) vulnerability.
5
Can attackers exploit CVE-2014-0168 remotely?
Yes, attackers can exploit CVE-2014-0168 remotely to hijack user authentication.