Improper Authentication in Apache ActiveMQ
Moderate severity
GitHub Reviewed
Published
Feb 9, 2022
to the GitHub Advisory Database
•
Updated Mar 14, 2024
Package
Affected versions
< 5.15.12
Patched versions
5.15.12
Description
Published by the National Vulnerability Database
Sep 10, 2020
Reviewed
Apr 5, 2021
Published to the GitHub Advisory Database
Feb 9, 2022
Last updated
Mar 14, 2024
Credits
-
sunSUNQ Analyst
Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to proxy the original, and bound that, he effectively becomes a man in the middle and is able to intercept the credentials when an user connects. Upgrade to Apache ActiveMQ 5.15.12.
References