CVE-2021-40684
Critical
Description
Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint which allows remote access to the JMX of the runtime container, which would allow an attacker the ability to read or modify the container or software running in the container.
SeverityCritical
CVSS9.1
Exploit probability—
ProductTalend Esb Runtime
PublishedSep 22, 2021
First seenSep 22, 2021
How to fix
Update
- talend esb_runtime7.1.1-r2021-09 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| talend esb_runtime | 5.1 ≤ v < 7.1.1-r2021-09 | 7.1.1-r2021-09 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.