CVE-2020-13920
If an attacker creates another server to proxy the original, and bound that, he effectively becomes a man in the middle and is able to intercept the credentials when an user connects.
Does this matter?
Lower severity and a low EPSS score (4.54%). Track it; it rarely justifies an emergency change on its own.
Description
Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to proxy the original, and bound that, he effectively becomes a man in the middle and is able to intercept the credentials when an user connects. Upgrade to Apache ActiveMQ 5.15.12.
- CVSS 3.1
- 5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 4.54% probability · 91th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-306
- Affected
- apache/activemq · oracle/communications diameter signaling router · oracle/flexcube private banking · debian/debian linux
- Source
- security@apache.org
References
- http://activemq.apache.org/security-advisories.data/CVE-2020-13920-announcement.txtVendor Advisory
- https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E
- https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2020/10/msg00013.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/11/msg00013.html
- https://www.oracle.com/security-alerts/cpuoct2020.htmlThird Party Advisory
- http://activemq.apache.org/security-advisories.data/CVE-2020-13920-announcement.txtVendor Advisory
- https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E
- https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2020/10/msg00013.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/11/msg00013.html
- https://www.oracle.com/security-alerts/cpuoct2020.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.