NetSight
IP …
critical9.8

CVE-2020-11998

A regression has been introduced in the commit preventing JMX re-bind.

Impact

A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https://docs.oracle.com/javase/8/docs/technotes/guides/management/agent.html "A remote client could create a javax.management.loading.MLet MBean and use it to create new MBeans from arbitrary URLs, at least if there is no security manager. In other words, a rogue remote client could make your Java application execute arbitrary code." Mitigation: Upgrade to Apache ActiveMQ 5.15.13

Affected products

VendorProductAffected versions
ApacheActivemq
Version 5.15.12
OracleCommunications Diameter Signaling Router
from 8.0.0 through 8.5.0
OracleCommunications Element Manager
from 8.2.0 through 8.2.4.0
OracleCommunications Session Report Manager
from 8.0.0 through 8.2.2
OracleCommunications Session Route Manager
from 8.0.0 through 8.2.2
OracleEnterprise Repository
Version 11.1.1.7.0
OracleFlexcube Private Banking
Versions 12.0.0, 12.1.0

References