A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.Referenceshttps://jolokia.org/#Security_fixes_with_1.5.0https://access.redhat.com/errata/RHSA-2018:2669