Lucene search

[email protected]CVE-2020-1954

HistoryApr 01, 2020 - 9:15 p.m.

CVE-2020-1954

2020-04-0121:15:14

[email protected]

web.nvd.nist.gov

cve-2020-1954

apache cxf

jmx

mitm attack

security vulnerability

nvd

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.0%

JSON

Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in-the-middle (MITM) style attack. An attacker on the same host can connect to the registry and rebind the entry to another server, thus acting as a proxy to the original. They are then able to gain access to all of the information that is sent and received over JMX.

Affected configurations

NVD

Node

apachecxfRange<3.2.13

apachecxfRange3.3.0–3.3.6

Node

oraclecommunications_diameter_signaling_routerRange8.0.0–8.2.2

oraclecommunications_element_managerRange8.2.0–8.2.2

oraclecommunications_session_report_managerRange8.2.0–8.2.2

oracleenterprise_manager_base_platformMatch13.2.1.0

oraclepeoplesoft_enterprise_peopletoolsMatch8.56

Node

netapponcommand_workflow_automationMatch-

netappsnapmanagerMatch-sap

Node

oraclecommunications_diameter_signaling_router_idih\Range8.0.0–8.2.2

oraclecommunications_element_managerRange8.2.0–8.2.2

oraclecommunications_session_report_managerRange8.2.0–8.2.2

oraclecommunications_session_route_managerRange8.2.0–8.2.2

oracleenterprise_manager_base_platformMatch13.2.1.0

oraclepeoplesoft_enterprise_peopletoolsMatch8.56

CPENameOperatorVersion
apache:cxfapache cxflt3.2.13
apache:cxfapache cxflt3.3.6

CPE	Name	Operator	Version
apache:cxf	apache cxf	lt	3.2.13
apache:cxf	apache cxf	lt	3.3.6

CNA Affected

[
  {
    "product": "Apache CXF",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "affects all versions prior to 3.3.6 and 3.2.13"
      }
    ]
  }
]