[AMQ-7373] jolokia-core-1.6.0.jar is vulnerable to CVE-2018-10899

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 5.15.8, 5.15.9, 5.15.10, 5.15.11
• Fix Version/s: 5.16.0, 5.15.12
• Component/s: Web Console
• Assignee: Jean-Baptiste Onofré
• Reporter: Harish Kumar
• Created: 02/Jan/20 06:23
• Updated: 22/Jan/20 12:45
• Resolved: 22/Jan/20 12:45

Description

jolokia-core-1.6.0.jar is vulnerable to CVE-2018-10899

*PATH:*apache-activemq-5.15.11/lib/web/jolokia-core-1.6.0.jar

 

CVE-2018-10899
CVSSv3 Score: 8.8
https://nvd.nist.gov/vuln/detail/CVE-2018-10899 

Issue Links

• links to: GitHub Pull Request #427