[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUyg3C21OQ0eqdUHBKU1mz9GAS9zP2TSCBhwJz2nq6fQ":3,"g5a-risk:CVE-2014-0121":132},{"success":4,"data":5,"meta":130},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":14,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":52,"references":53,"referencesCount":75,"weaknesses":76,"weaknessesCount":85,"isActivelyExploited":86,"cisaInfo":14,"otxData":14,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":128,"notableEvents":129},"CVE-2014-0121","What is CVE-2014-0121?","The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter.","2017-12-29T22:29:00.317","2025-04-20T01:37:25.86",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":29,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":11,"BaseSeverity":26,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":14},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.03968,[38,38,38,38,38,38,38],"Critical",[42,47],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"hawt","hawtio","*","cpe:2.3:a:hawt:hawtio:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"redhat","jboss_fuse","6.1.0","cpe:2.3:a:redhat:jboss_fuse:6.1.0:beta:*:*:*:*:*:*",2,[54,61,65,69,71,73],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1072716","Red Hat",[58,59,60],"Issue Tracking","Patch","Third Party Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgithub.com\u002Fhawtio\u002Fhawtio\u002Fcommit\u002F5289715e4f2657562fdddcbad830a30969b96e1e","GitHub",[58,59,60],{"url":66,"source":67,"tags":68},"https:\u002F\u002Finfocon.org\u002Fcons\u002FSyScan\u002FSyScan%202015%20Singapore\u002FSyScan%202015%20Singapore%20presentations\u002FSyScan15%20David%20Jorm%20-%20Finding%20and%20exploiting%20novel%20flaws%20in%20Java%20software.pdf","Infocon",[58,60],{"url":55,"source":56,"tags":70},[58,59,60],{"url":62,"source":63,"tags":72},[58,59,60],{"url":66,"source":67,"tags":74},[58,60],6,[77],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2014-0121? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-0121, a critical severity cyber security vulnerability from 2017. The admin terminal in Hawt.io does not require authentic...","CVE-2014-0121, CVE-2014-0121 vulnerability, CVE-2014-0121 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, hawt security, redhat security, hawtio vulnerability, jboss_fuse vulnerability","\u002Fwhat-is\u002Fcve-2014-0121",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":9,"dateModified":10,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-0121","Cybersecurity","CVE-2014-0121, CVE-2014-0121 vulnerability, CVE-2014-0121 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114,122],{"Operator":14,"Negate":14,"Nodes":115},[116],{"Operator":117,"Negate":14,"CPEMatch":118},"OR",[119],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":120,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":121},"E2D6477F-AC38-49D3-B617-77FF372375D8","1.2.2",{"Operator":14,"Negate":14,"Nodes":123},[124],{"Operator":117,"Negate":14,"CPEMatch":125},[126],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":127,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"522C7490-D292-43FF-ABA4-FB1FBA3A36DC",[],[],{"lastModified":10,"cacheTime":131,"version":32},1792248378833,{"score":133,"band":134,"action":135,"scoredAt":136},55,"Medium","Plan remediation","2026-10-16T06:43:06.796929+00:00"]