CVE-2017-2594

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-2594
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-2594.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-2594
Aliases
Published
2018-05-08T17:29:00.670Z
Modified
2026-07-08T11:48:15.569707Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root.

References

Affected packages

Git / github.com/hawtio/hawtio

Affected ranges

Type
GIT
Repo
https://github.com/hawtio/hawtio
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
667829744dcd62c4271df0b4a93318dbd80fa8d2
Database specific 
{
    "cpe": "cpe:2.3:a:hawt:hawtio:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.68"
        }
    ]
}

Affected versions

hawtio-1.*
hawtio-1.0
hawtio-1.1-SNAPSHOT
hawtio-1.2-M10
hawtio-1.2-M11
hawtio-1.2-M12
hawtio-1.2-M13
hawtio-1.2-M14
hawtio-1.2-M15
hawtio-1.2-M16
hawtio-1.2-M17
hawtio-1.2-M18
hawtio-1.2-M19
hawtio-1.2-M2
hawtio-1.2-M20
hawtio-1.2-M21
hawtio-1.2-M22
hawtio-1.2-M23
hawtio-1.2-M24
hawtio-1.2-M25
hawtio-1.2-M26
hawtio-1.2-M3
hawtio-1.2-M4
hawtio-1.2-M5
hawtio-1.2-M6
hawtio-1.2-M7
hawtio-1.2-M8
hawtio-1.2-M9
hawtio-1.2-SNAPSHOT
hawtio-1.2.0
hawtio-1.2.1
hawtio-1.2.2
hawtio-1.2.3
hawtio-1.3.0
hawtio-1.3.1
hawtio-1.4.0
hawtio-1.4.1
hawtio-1.4.10
hawtio-1.4.11
hawtio-1.4.12
hawtio-1.4.14
hawtio-1.4.15
hawtio-1.4.16
hawtio-1.4.17
hawtio-1.4.18
hawtio-1.4.19
hawtio-1.4.2
hawtio-1.4.20
hawtio-1.4.21
hawtio-1.4.22
hawtio-1.4.23
hawtio-1.4.24
hawtio-1.4.25
hawtio-1.4.26
hawtio-1.4.27
hawtio-1.4.28
hawtio-1.4.29
hawtio-1.4.3
hawtio-1.4.30
hawtio-1.4.31
hawtio-1.4.32
hawtio-1.4.33
hawtio-1.4.34
hawtio-1.4.35
hawtio-1.4.36
hawtio-1.4.37
hawtio-1.4.38
hawtio-1.4.39
hawtio-1.4.4
hawtio-1.4.40
hawtio-1.4.41
hawtio-1.4.42
hawtio-1.4.43
hawtio-1.4.44
hawtio-1.4.45
hawtio-1.4.46
hawtio-1.4.47
hawtio-1.4.48
hawtio-1.4.49
hawtio-1.4.5
hawtio-1.4.50
hawtio-1.4.51
hawtio-1.4.52
hawtio-1.4.53
hawtio-1.4.54
hawtio-1.4.55
hawtio-1.4.56
hawtio-1.4.57
hawtio-1.4.58
hawtio-1.4.59
hawtio-1.4.6
hawtio-1.4.60
hawtio-1.4.61
hawtio-1.4.62
hawtio-1.4.63
hawtio-1.4.64
hawtio-1.4.65
hawtio-1.4.66
hawtio-1.4.67
hawtio-1.4.68
hawtio-1.4.7
hawtio-1.4.8
hawtio-1.4.9
project-2.*
project-2.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-2594.json"