CVE-2019-0192

CVE-2019-0192 - Apache Solr RCE 5.0.0 5.5.5 및 6.0.0 6.6.5 이것은 Apache Solr RCE의 초기 PoC입니다. From https://issues.apache.org/jira/browse/SOLR-13301: ConfigAPI는 HTTP POST 요청을 통해 Solr의 JMX 서버를 구성할 수 있습니다. 이를 악성 RMI 서버로 지정하면 공격자는 Solr의 안전하지 않은 역직렬화를 이용하여 Solr 측에서 원격 코드 실행을 트리거할 수 있습니다. 개념 증명 보안 권고 설명을...

CVE-2018-14324-Exploit

Eclipse GlassFish 해킹 - CVE-2018-14324 CVE-2018-14324에 대한 설명은 이 취약점의 영향을 완전히 설명하지 않습니다. TLDR: 하드코딩된 admin:admin 자격 증명을 통해 Java Management ExtensionsJMX에 접근할 수 있습니다. 영향이 "잠재적으로 민감한 정보, 데이터베이스 작업 수행, 또는 JMX RMI 세션을 통한 데모 조작"으로 나열되어 있지만, JMX RMI 세션을 통한 조작이 무엇을 의미하는지 설명하지 않습니다. 높은 CVSS 점수 9.8 때문에만...

CVE-2019-12409

CVE-2019-12409 Apache Solr RCE ENABLEREMOTEJMXOPTS="true" root@kali:/opt/solr-8.1.1/bin cat solr.in.sh |grep true Set to true to activate the JMX RMI connector to allow remote JMX client applications ENABLEREMOTEJMXOPTS="true" SOLROPTS="$SOLROPTS -Dsolr.clustering.enabled=true" Enables log rotati...

CVE-2023-26269

CVE-2023-26269: Apache James에서 잘못 구성된 JMX 기본적으로 Apache James는 localhost, 포트 9999에서 수신 대기하는 JMXRMI 서비스를 엽니다. JMX가 인증되지 않은 액세스를 허용하도록 잘못 구성되어 있기 때문에, James가 실행 중인 머신에 대한 로컬 액세스 권한이 있는 공격자는 “MLet 공격”을 사용하여 임의의 MBean을 로드하고 악성 Java 코드를 실행할 수 있습니다. 애플리케이션이 SMTP, POP3, IMAP 25, 110, 143 포트에서 수신 대기하려면 상승...

CVE-2026-46495 OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiConnector.java processes attacker-controlled credential objects before authentication without a restrictive...

EUVD-2026-78579

OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiConnector.java processes attacker-controlled credential objects before authentication without a restrictive...

CVE-2026-46495 OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiConnector.java processes attacker-controlled credential objects before authentication without a restrictive...

CVE-2026-46495: Deserialization of Untrusted Data

OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiConnector.java processes attacker-controlled credential objects before authentication without a restrictive...

GHSA-43X2-G84Q-FMQX OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

Summary Description A Deserialization of Untrusted Data CWE-502 issue in OpenDJ's JMX RMI connector allows an unauthenticated remote attacker to deserialize arbitrary Java objects on the server. The vulnerability exists because the platform reads and processes attacker-controlled bytes prior to...

OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

Summary Description A Deserialization of Untrusted Data CWE-502 issue in OpenDJ's JMX RMI connector allows an unauthenticated remote attacker to deserialize arbitrary Java objects on the server. The vulnerability exists because the platform reads and processes attacker-controlled bytes prior to...

BIT-ACTIVEMQ-2020-13920

Apache ActiveMQ uses LocateRegistry.createRegistry to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to...

EUVD-2018-3287

Malware in sbrugna...

EUVD-2019-17256

Malware in sbrugna...

EUVD-2020-25208

Malware in sbrugna...

EUVD-2022-2477

Malicious code in bioql PyPI...

EUVD-2022-6906

Malicious code in bioql PyPI...

EUVD-2022-1253

Malicious code in bioql PyPI...

CVE-2024-28211

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...

CVE-2022-37022

Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11. Any user wishing to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15. Use of 1.15 on Java 11 will...

CVE-2020-3943

vRealize Operations for Horizon Adapter 6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1 uses a JMX RMI service which is not securely configured. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to execute arbitrary code ...