CVE-2018-14324-Exploit

入侵 Eclipse GlassFish - CVE-2018-14324 CVE-2018-14324 的描述 并未完全解释此漏洞的影响。TLDR：你可以通过硬编码的 admin:admin 凭据访问 Java 管理扩展 JMX。 虽然其影响被描述为“可能泄露敏感信息、执行数据库操作或通过 JMX RMI 会话操控演示”，但它并未解释通过 JMX RMI 会话进行操控意味着什么。 我深入研究仅仅是因为 CVSS 评分高达 9.8，结果发现你可以通过 javax.management.loading:type=MLet MBean 实际实现 RCE，该 MBean 在 GlassFish...

SCAT

SCAT Herramienta de adquisición de credenciales de HP SiteScope ¿Qué es esto? Una herramienta que abusa de una vulnerabilidad de ejecución remota de código en instalaciones predeterminadas de HP SiteScope v11.32 y otras para robar credenciales almacenadas en SiteScope. ¿Qué vulnerabilidad de...

GHSA-WQFH-9M4G-7X6X Remote code execution in Apache ActiveMQ

A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack - A remote client could create a...

CVE-2020-11998: Undefined Security Weakness

A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack:...

CVE-2020-5396

VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service available which contains an insecure default configuration. This allows a malicious user to create...

CVE-2020-5396: Improper Access Control

VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service available which contains an insecure default configuration. This allows a malicious user to create...

CVE-2020-5396

VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service available which contains an insecure default configuration. This allows a malicious user to create...