Skip to content
OpenAdvisories

Package · Maven

org.apache.karaf.management:org.apache.karaf.management.server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2020-11980

    Server-Side Request Forgery in Karaf

    In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a "viewer" role. In…

    org.apache.karaf.management:org.apache.karaf.management.server Maven