Remote code execution in Apache TomEE

🗓️ 09 Feb 2022 22:44:38Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 40 Views

Remote code execution in Apache TomEE due to misconfigured ActiveMQ broke

Reporter	Title	Published	Views	Family All 11
CNNVD	Apache TomEE 授权问题漏洞	17 Dec 202000:00	–	cnnvd
CNVD	Apache TomEE Authorization Issues Vulnerability	18 Dec 202000:00	–	cnvd
CVE	CVE-2020-13931	17 Dec 202023:42	–	cve
Cvelist	CVE-2020-13931	17 Dec 202023:42	–	cvelist
EUVD	EUVD-2022-1105	3 Oct 202520:07	–	euvd
NVD	CVE-2020-13931	18 Dec 202000:15	–	nvd
OpenVAS	Apache TomEE JMX Vulnerability (CVE-2020-13931)	21 Dec 202000:00	–	openvas
OSV	GHSA-MP28-RQ7G-QX62 Remote code execution in Apache TomEE	9 Feb 202222:44	–	osv
Prion	Input validation	18 Dec 202000:15	–	prion
RedhatCVE	CVE-2020-13931	22 May 202516:18	–	redhatcve

Vulners

Node

org.apache.tomee apache-tomeeRange<7.0.9maven

OR

org.apache.tomee apache-tomeeRange7.1.0–7.1.4maven

OR

org.apache.tomee apache-tomeeRange8.0.0–8.0.4maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-13931
lists	www.lists.apache.org/thread.html/r7f98907165b355dc65f28a57f15103a06173ce03261115fa46d569b4@%3Cdev.tomee.apache.org%3E
lists	www.lists.apache.org/thread.html/r85b87478f8aa4751aa3a06e88622e80ffabae376ee7283e147ee56b9@%3Cdev.tomee.apache.org%3E
lists	www.lists.apache.org/thread.html/ref088c4732e1a8dd0bbbb96e13ffafcfe65f984238ffa55f438d78fe%40%3Cdev.tomee.apache.org%3E
github	www.github.com/advisories/GHSA-mp28-rq7g-qx62

01 Feb 2023 05:05Current

2.1Low risk

Vulners AI Score2.1

CVSS 26.8

CVSS 3.19.8

EPSS0.01368

apache tomee remote code execution activemq