PT-2019-18725 · Nice · Nice Engage

Red Timmy Sec · Published 2019-04-05 · Updated 2020-08-24 · CVE-2019-7727

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NICE Engage versions prior to 6.6

Description The issue concerns the default configuration of NICE Engage, where an unauthenticated JMX/RMI interface is bound to all network interfaces without restrictions on MBean registration. This allows remote attackers to execute arbitrary code via the RMI protocol using the JMX connector. The observed affected TCP port is 6338, but other ports could be vulnerable based on the product's configuration.

Recommendations For versions prior to 6.6, restrict access to the JMX/RMI interface by binding it to a specific network interface or limiting MBean registration to prevent remote code execution. As a temporary workaround, consider disabling the JMX/RMI interface until a patch is available. Restrict access to the affected TCP port, which is observed to be 6338, to minimize the risk of exploitation.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-7727

Affected Products

Nice Engage

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-7727 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7727 · Vendor Advisory
• http://seclists.org/fulldisclosure/2019/Apr/4 · Note
• https://seclists.org/bugtraq/2019/Apr/2 · Note
• https://t.me/defcon_news/10288 · Telegram Post
• https://redtimmysec.wordpress.com/2019/03/26/jmx-rmi-multiple-applications-rce · Note