CVE-2019-12409

CVE-2019-12409: Apache Solrのデフォルト設定不良によるRCE脆弱性 Apache Solrの8.1.1および8.2.0リリースには、Solrに同梱されているデフォルトのsolr.in.sh設定ファイルに安全でない設定が含まれています。 この脆弱性の原因となる設定は以下の通りです： "solr.in.sh"内: ENABLEREMOTEJMXOPTS="true" JMXサービスを有効化 "solr.cmd"内: -Dcom.sun.management.jmxremote.local.only=false JMXへのリモートアクセスを許可...

Remote Code Execution (RCE)

Apache cassandra is vulnerable to remote code execution. The vulnerability exists due to the use of a default JMX configuration of unauthenticated JMX/RMI interface to all network interfaces. Therefore, anyone with access to the interface is allowed to listen to the RMI and to trigger a remote...

HPE Intelligent Management Center (IMC) Information Disclosure Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A JMX insecure configuration remote unauthenticated information disclosure vulnerability exists in HPE...

CVE-2013-4444

Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file...

CVE-2013-4444

Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file...

CVE-2013-4444

Removed by vendor...