CVE-2023-37234

Loftware Spectrum through 4.6 has unprotected JMX Registry...

CVE-2023-37234

Loftware Spectrum through 4.6 has unprotected JMX Registry...

CVE-2023-37234

Loftware Spectrum through 4.6 has unprotected JMX Registry...

CVE-2023-37234

Loftware Spectrum through 4.6 has unprotected JMX Registry...

CVE-2023-37234

Loftware Spectrum versions through 4.6 contain a security vulnerability due to an unprotected JMX Registry. Affected component: Loftware Spectrum (through 4.6). Reported impact includes exposure risks consistent with unprotected JMX access. The issue stems from the JMX Registry exposure; no explo...

CVE-2023-37234

Loftware Spectrum through 4.6 has unprotected JMX Registry...

activemq: improper authentication allows MITM attack

Apache ActiveMQ uses LocateRegistry.createRegistry to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to...