CVE-2018-1000130

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.

• CWE-74

• https://access.redhat.com/errata/RHSA-2018:2669Third Party Advisory
• https://jolokia.org/#Security_fixes_with_1.5.0Release Notes, Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2669Third Party Advisory
• https://jolokia.org/#Security_fixes_with_1.5.0Release Notes, Vendor Advisory

Published

Mar 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000124I Librarian I-librarian version 4.8 and earlier contains a X…10
• CVE-2018-1000125inversoft prime-jwt version prior to version 1.3.0 or prior …
• CVE-2018-1000126Ajenti version 2 contains an Information Disclosure vulnerab…
• CVE-2018-1000127memcached version prior to 1.4.37 contains an Integer Overfl…
• CVE-2018-1000128Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000129An XSS vulnerability exists in the Jolokia agent version 1.3…
• CVE-2018-1000131Pradeep Makone wordpress Support Plus Responsive Ticket Syst…
• CVE-2018-1000132Mercurial version 4.5 and earlier contains a Incorrect Acces…
• CVE-2018-1000133Pitchfork version 1.4.6 RC1 contains an Improper Privilege M…
• CVE-2018-1000134UnboundID LDAP SDK version from commit 801111d8b5c732266a5db…
• CVE-2018-1000135GNOME NetworkManager version 1.10.2 and earlier contains a I…
• CVE-2018-1000136Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0…