CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It may be remotely exploitable.
CVE
CVE-2021-40684
Severity
CRITICAL
CVSS
9.1
EPSS
1.24%
Original NVD Description
Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint which allows remote access to the JMX of the runtime container, which would allow an attacker the ability to read or modify the container or software running in the container.
Related CVEs
Other vulnerabilities affecting the same vendor(s)