CVE-2020-13920 — Missing Authentication for Critical Function in Apache Activemq

CWE-306 — Missing Authentication for Critical FunctionCWE-287 — Improper Authentication9 documents8 sources
Severity
5.9MEDIUMNVD
EPSS
0.2%
top 61.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Apache ActivemqOracle Communications Diameter Signaling RouterApache Software Foundation Apache Activemq+2 more
Timeline
PublishedSep 10
Latest updateJul 23

Description

Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to proxy the original, and bound that, he effectively becomes a man in the middle and is able to intercept the credentials when an user connects. Upgrade to Apache ActiveMQ 5.15.12.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages5 packages

▶NVDapache/activemq< 5.15.12
▶Debianapache/activemq< 5.16.0-1+2
▶CVEListV5apache_software_foundation/apache_activemqApache ActiveMQ version prior to 5.15.12
▶NVDoracle/flexcube_private_banking12.0.0, 12.1.0+1

Also affects: Debian Linux 9.0

🔴Vulnerability Details

4
GHSA
Improper Authentication in Apache ActiveMQ↗2022-02-09
▶
OSV
Improper Authentication in Apache ActiveMQ↗2022-02-09
▶
CVEList
CVE-2020-13920: Apache ActiveMQ uses LocateRegistry↗2020-09-10
▶
OSV
CVE-2020-13920: Apache ActiveMQ uses LocateRegistry↗2020-09-10
▶

📋Vendor Advisories

3
Ubuntu
Apache ActiveMQ vulnerabilities↗2024-07-23
▶
Red Hat
activemq: improper authentication allows MITM attack↗2020-09-10
▶
Debian
CVE-2020-13920: activemq - Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI regis...↗2020
▶

💬Community

1
Bugzilla
CVE-2020-13920 activemq: improper authentication allows MITM attack↗2020-09-17
▶