Security Advisory
CVE-2018-1000130
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.