5 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mx4j (UTSA-2026-093038)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093038 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mx4j (UTSA-2026-093031)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093031 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...
EUVD-2020-16966
Malware in sbrugna...
CVE-2020-24231
Symmetric DS 3.12.0 uses mx4j to provide access to JMX over HTTP. mx4j, by default, has no auth and is available on all interfaces. An attacker can interact with JMX: get system info, and invoke MBean methods. It is possible to install additional MBeans from a remote host using MLet that leads to...