CVE-2022-41678

🗓️ 28 Nov 2023 15:08:38Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 202 Views🌐 WEB

CVE-2022-41678 Jolokia authentication bypass leads to RCE via ActiveM

Reporter	Title	Published	Views	Family All 51
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable due to issues in JDOM, Apache Log4j 1.x, Apache ActiveMQ and Apache Camel	24 Jun 202511:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable due to Apache ActiveMQ Jolokia Remote Code Execution	25 Jun 202513:08	–	ibm
IBM Security Bulletins	Security Bulletin: Sterling Control Center v6.2.1 is vulnerable due to Apache ActiveMQ issue	3 Oct 202412:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to remote code execution due to Apache ActiveMQ (CVE-2022-41678)	1 Dec 202310:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	14 Mar 202414:34	–	ibm
GithubExploit	Exploit for Improper Authentication in Apache Activemq	14 Oct 202514:18	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Apache Activemq	28 Nov 202420:48	–	githubexploit
BDU FSTEC	The vulnerability of the Jolokia component in the Apache ActiveMQ software platform allows a perpetrator to execute arbitrary code.	27 Apr 202600:00	–	bdu_fstec
Circl	CVE-2022-41678	30 Nov 202312:31	–	circl
CNNVD	Apache ActiveMQ Authorization Issues Vulnerability	28 Nov 202300:00	–	cnnvd

NVD

Vulners

Node

apache activemqRange<5.16.6

apache activemqRange5.17.0–5.17.4

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.activemq:apache-activemq",
    "product": "Apache ActiveMQ",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "5.16.6",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThan": "5.17.4",
        "status": "affected",
        "version": "5.17.0",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.18.0"
      },
      {
        "status": "unaffected",
        "version": "6.0.0"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/11/28/1
security	www.security.netapp.com/advisory/ntap-20240216-0004/
activemq	www.activemq.apache.org/security-advisories.data/CVE-2022-41678-announcement.txt
lists	www.lists.apache.org/thread/7g17kwbtjl011mm4tr8bn1vnoq9wh4sl
lists	www.lists.debian.org/debian-lts-announce/2024/10/msg00027.html

Parameter	Position	Path	Description	CWE
cmd	path	admin/shell.jsp	Webshell can be written via exploited Jolokia/JMX flow enabling RCE.	CWE-287
cmd	path	admin/shelljfr.jsp	Webshell via JFR path enabling remote command execution.	CWE-287

17 Jun 2026 05:03Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18.8

EPSS0.8581

CWE-287