CVE-2014-0121

Published December 29th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter.

Hawtio web console helps you manage your JVM stuff and stay cool!

GitHub

1.46K