CVE-2020-11969 — Missing Authentication for Critical Function in Apache Tomee

CWE-306 — Missing Authentication for Critical Function5 documents4 sources

Severity

9.8CRITICALNVD

EPSS

1.1%

top 21.82%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apache Tomee

Timeline

PublishedJun 15

Latest updateFeb 10

Description

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 - 7.0.7, Apache TomEE 1.0.0 - 1.7.5.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDapache/tomee1.0.0 — 1.7.5+5

🔴Vulnerability Details

OSV

Missing Authentication for Critical Function in Apache TomEE↗2022-02-10

▶

GHSA

Missing Authentication for Critical Function in Apache TomEE↗2022-02-10

▶

GHSA

Remote code execution in Apache TomEE↗2022-02-09

▶

CVEList

CVE-2020-11969: If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP↗2020-06-15

▶