Path Traversal Vulnerability in Hawtio Allows for Information Disclosure

CVE-2017-2594 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root.

Learn more about our Web Application Penetration Testing UK.