PT-2023-9583 · Apache · Log4J2+1

Mal + 1 · Published 2023-12-13 · Updated 2026-06-15 · CVE-2023-50780

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions prior to 2.29.0

Description The issue is related to the exposure of diagnostic information and controls through MBeans, which are also accessible through the authenticated Jolokia endpoint. This includes the Log4J2 MBean, which is not intended for non-administrative users. An authenticated attacker could exploit this to write arbitrary files to the filesystem, potentially leading to remote code execution.

Recommendations For Apache ActiveMQ Artemis versions prior to 2.29.0, upgrade to version 2.29.0 or later to fix the issue. As a temporary workaround, consider restricting access to the Jolokia endpoint and MBeans to minimize the risk of exploitation. Avoid using the Log4J2 MBean for non-administrative purposes until the issue is resolved.

Fix

RCE

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

BDU:2024-08497

CVE-2023-50780

GHSA-443J-GRXV-2PGV

Affected Products

Apache Activemq Artemis

Log4J2

References · 19

• https://lists.apache.org/thread/63b78shqz312phsx7v1ryr7jv7bprg58 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50780 · Security Note
• https://bdu.fstec.ru/vul/2024-08497 · Security Note
• https://osv.dev/vulnerability/GHSA-443j-grxv-2pgv · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-50780 · Vendor Advisory
• https://github.com/apache/activemq-artemis · Note
• https://github.com/apache/activemq-artemis/commit/cfb585eaf61d570eecd65c6ad0e92282df7d3869 · Note
• https://twitter.com/CVEnew/status/1845862017174827277 · Twitter Post
• https://issues.apache.org/jira/browse/ARTEMIS-4150 · Note
• https://vulners.com/cve/CVE-2023-50780 · Note
• https://t.me/cveNotify/167386 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1845955715942268964 · Twitter Post
• https://twitter.com/oss_security/status/1845925556056895918 · Twitter Post
• https://twitter.com/cracbot/status/1846793371073105994 · Twitter Post
• https://t.me/cvedetector/7822 · Telegram Post