PT-2020-13781 · Apache+2 · Apache Activemq+2

Published 2020-09-10 · Updated 2024-07-23 · CVE-2020-13920

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.15.12

Description The issue allows an attacker to connect to the JMX RMI registry without authentication and rebind the jmxrmi entry. By creating a proxy server, an attacker can intercept user credentials.

Recommendations For versions prior to 5.15.12, upgrade to Apache ActiveMQ 5.15.12 to resolve the issue.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BIT-ACTIVEMQ-2020-13920

CVE-2020-13920

DLA-2400-1

DLA-3657-1

GHSA-XGRX-XPV2-6VP4

USN-6910-1

Affected Products

Apache Activemq

Linuxmint

Ubuntu

References · 43

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/apache_activemq_rce_cve_2023_46604.rb · Exploit
• 🔥 https://github.com/SaumyajeetDas/CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ · Exploit
• 🔥 https://github.com/evkl1d/CVE-2023-46604 · Exploit
• 🔥 https://github.com/Arlenhiack/ActiveMQ-RCE-Exploit · Exploit
• 🔥 https://github.com/sule01u/CVE-2023-46604 · Exploit
• 🔥 https://github.com/duck-sec/CVE-2023-46604-ActiveMQ-RCE-pseudoshell · Exploit
• 🔥 https://github.com/justdoit-cai/CVE-2023-46604-Apache-ActiveMQ-RCE-exp · Exploit
• 🔥 https://github.com/h3x3h0g/ActiveMQ-RCE-CVE-2023-46604-Write-up · Exploit
• https://osv.dev/vulnerability/DLA-3657-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xgrx-xpv2-6vp4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-13920 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13920 · Security Note
• http://activemq.apache.org/security-advisories.data/CVE-2020-13920-announcement.txt · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6910-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-activemq-2020-13920 · Vendor Advisory