CVE-2020-13931

CWE-306 — Missing Authentication4 documents4 sources
Severity
9.8CRITICAL
EPSS
1.4%
top 19.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Tomee
Timeline
PublishedDec 18
Latest updateFeb 9

Description

If Apache TomEE 8.0.0-M1 - 8.0.3, 7.1.0 - 7.1.3, 7.0.0-M1 - 7.0.8, 1.0.0 - 1.7.5 is configured to use the embedded ActiveMQ broker, and the broker config is misconfigured, a JMX port is opened on TCP port 1099, which does not include authentication. CVE-2020-11969 previously addressed the creation of the JMX management interface, however the incomplete fix did not cover this edge case.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶Mavenorg.apache.tomee:apache-tomee8.0.0 — 8.0.4+2
▶NVDapache/tomee1.0.0 — 1.7.5+5
▶CVEListV5apache_tomeeApache TomEE 8.0.0-M1 - 8.0.3, 7.1.0 - 7.1.3, 7.0.0-M1 - 7.0.8, 1.0.0 - 1.7.5

🔴Vulnerability Details

3
OSV
Remote code execution in Apache TomEE↗2022-02-09
▶
GHSA
Remote code execution in Apache TomEE↗2022-02-09
▶
CVEList
CVE-2020-13931: If Apache TomEE 8↗2020-12-17
▶
CVE-2020-13931 (CRITICAL CVSS 9.8) | If Apache TomEE 8.0.0-M1 - 8.0.3 | cvebase.io