Description
Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Apache Camel | Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.camel:camel | < 3.2.0 | 3.2.0 | GHSA-hfg5-xpvw-c9x4 |
| Maven | org.apache.camel:camel-core | < 3.2.0 | 3.2.0 | GHSA-hfg5-xpvw-c9x4 |
| Maven | org.apache.camel:camel-management | < 3.2.0 | 3.2.0 | GHSA-hfg5-xpvw-c9x4 |
Advisories 2
- WID-SEC-2025-1365 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 18, 2026
- WID-SEC-2023-1548 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 29, 2023
References
- [oss-security] 20200514 [SECURITY] New security advisory CVE-2020-11971 released for Apache Camel mailing-list
- [camel-commits] 20200522 [camel-website] 01/02: CVE-2020-11971 - Amend the fix version mailing-list
- [camel-commits] 20200522 [camel-website] branch CVE-2020-11971-amend created (now 2a753f7) mailing-list
- [camel-commits] 20200522 [camel-website] 02/02: CVE-2020-11971 - Amended fix version mailing-list
- [activemq-issues] 20200601 [jira] [Created] (AMQ-7492) CVE-2020-11971 needs AMQ to upgrade to Apache Camel 3.2.0 mailing-list
- [activemq-issues] 20200622 [jira] [Commented] (AMQ-7492) CVE-2020-11971 needs AMQ to upgrade to Apache Camel 3.2.0 mailing-list
- [activemq-issues] 20200622 [jira] [Assigned] (AMQ-7492) CVE-2020-11971 needs AMQ to upgrade to Apache Camel 3.2.0 mailing-list
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://camel.apache.org/security/CVE-2020-11971.html
- [activemq-issues] 20201122 [jira] [Commented] (AMQ-7492) CVE-2020-11971 needs AMQ to upgrade to Apache Camel 3.2.0 mailing-list
- [activemq-issues] 20201122 [jira] [Updated] (AMQ-7492) CVE-2020-11971 needs AMQ to upgrade to Apache Camel 2.25.2 mailing-list
- https://www.oracle.com/security-alerts/cpujan2021.html
- [activemq-users] 20210830 Security issues mailing-list
- [activemq-users] 20210831 RE: Security issues mailing-list
- https://www.oracle.com/security-alerts/cpuapr2022.html