CVE-2023-26269

CVE-2023-26269：Apache James 中的 JMX 配置错误 默认情况下，Apache James 会打开一个 JMXRMI 服务，该服务监听 localhost 的 9999 端口。由于 JMX 配置错误，允许未经身份验证的访问，因此能够本地访问运行 James 机器的攻击者可以使用 “MLet 攻击” 来加载任意 MBean 并执行恶意 Java 代码。 由于应用程序需要提升权限才能监听 SMTP、POP3、IMAP（25、110、143）端口，该应用程序通常以 “root” 用户身份运行，从而增加了潜在的本地权限提升（LPE）攻击的影响。 厂商披露：...

CVE-2018-14324-Exploit

入侵 Eclipse GlassFish - CVE-2018-14324 CVE-2018-14324 的描述 并未完全解释此漏洞的影响。TLDR：你可以通过硬编码的 admin:admin 凭据访问 Java 管理扩展 JMX。 虽然其影响被描述为“可能泄露敏感信息、执行数据库操作或通过 JMX RMI 会话操控演示”，但它并未解释通过 JMX RMI 会话进行操控意味着什么。 我深入研究仅仅是因为 CVSS 评分高达 9.8，结果发现你可以通过 javax.management.loading:type=MLet MBean 实际实现 RCE，该 MBean 在 GlassFish...

CVE-2019-12409

CVE-2019-12409 Apache Solr RCE ENABLEREMOTEJMXOPTS="true" root@kitploit: root@kali:/opt/solr-8.1.1/bin cat solr.in.sh |grep true Set to true to activate the JMX RMI connector to allow remote JMX client applications ENABLEREMOTEJMXOPTS="true" SOLROPTS="$SOLROPTS -Dsolr.clustering.enabled=true"...

CVE-2019-0192

CVE-2019-0192 - Apache Solr RCE 5.0.0-5.5.5 e 6.0.0-6.6.5 Questa è una PoC preliminare della RCE di Apache Solr Da https://issues.apache.org/jira/browse/SOLR-13301: ConfigAPI consente di configurare il server JMX di Solr tramite una richiesta HTTP POST. Puntandolo a un server RMI malevolo, un...

GHSA-43X2-G84Q-FMQX OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

Summary Description A Deserialization of Untrusted Data CWE-502 issue in OpenDJ's JMX RMI connector allows an unauthenticated remote attacker to deserialize arbitrary Java objects on the server. The vulnerability exists because the platform reads and processes attacker-controlled bytes prior to...

BIT-ACTIVEMQ-2020-13920

Apache ActiveMQ uses LocateRegistry.createRegistry to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to...

EUVD-2018-3287

Malware in sbrugna...

EUVD-2019-17256

Malware in sbrugna...

EUVD-2020-25208

Malware in sbrugna...

EUVD-2022-2477

Malicious code in bioql PyPI...

EUVD-2022-6906

Malicious code in bioql PyPI...

EUVD-2022-1253

Malicious code in bioql PyPI...

CVE-2024-28211

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...

CVE-2022-37022

Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11. Any user wishing to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15. Use of 1.15 on Java 11 will...

CVE-2020-3943

vRealize Operations for Horizon Adapter 6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1 uses a JMX RMI service which is not securely configured. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to execute arbitrary code ...

TIBCO JasperReports Server 8.0.2 Community Edition Code Execution Vulnerability

Due to JMX/RMI services in TIBCO JasperReports Server version 8.0.2 Community Edition performing unsafe deserialization, it is possible to execute arbitrary code and system commands on the server system. Product: JasperReports Server Manufacturer: TIBCO Software Inc. Tested Versions: 8.0.2...

TIBCO JasperReports Server 8.0.2 Community Edition Code Execution

Advisory ID: SYSS-2022-041 Product: JasperReports Server Manufacturer: TIBCO Software Inc. Tested Versions: 8.0.2 Community Edition Vulnerability Type: CWE-502: Deserialization of Untrusted Data Risk Level: High Solution Status: Fixed Manufacturer Notification: 2022-06-10 Solution Date: 2022-08-1...

Deserialization Of Untrusted Data

apache-geode is vulnerable to deserialization of untrusted data. The vulnerability exists because the serialization filtering is not properly configured for JMX/RMI which allows an attacker to to inject and execute arbitrary code through the untrusted data...

PT-2022-4609 · Oracle +1 · Java +1

Name of the Vulnerable Software and Affected Versions: Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 Description: The issue is related to the deserialization of untrusted data when using JMX over RMI on Java 8, which can allow a remote attacker to execute arbitrary code. To protect agains...

Improper Authentication in Apache ActiveMQ

Apache ActiveMQ uses LocateRegistry.createRegistry to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to...