high7.5
CVE-2023-31444
In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow unauthenticated access to the Jolokia endpoint of the microservice.
Impact
In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow unauthenticated access to the Jolokia endpoint of the microservice. This allows for remote access to the JVM via the Jolokia JMX-HTTP bridge.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Talend | Studio | before 7.3.1-r2022-10 from 8.0.0 before 8.0.1-r2022-09 |