Security Advisory
CVE-2014-0120
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."