Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-1954 EUVD-2022-0979GHSA-ffm7-7r8g-77xm

Apache CXF JMX Integration is vulnerable to a MITM attack

Published Apr 1, 2020 · Updated Aug 4, 2024 · Assigned by apache

Vendor: Apache Product: Apache CXF Package: org.apache.cxf:cxf-rt-management Ecosystem: Maven

Description

Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in-the-middle (MITM) style attack. An attacker on the same host can connect to the registry and rebind the entry to another server, thus acting as a proxy to the original. They are then able to gain access to all of the information that is sent and received over JMX.

Affected products

VendorProductAffectedFixed
Apache Apache CXF affects all versions prior to 3.3.6 and 3.2.13 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat JBoss EAP 7 eap7-activemq-artemis +15 2.9.0-5.redhat_00011.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-activemq-artemis-native 1:1.0.2-1.redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-apache-commons-codec 1.14.0-1.redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-apache-commons-lang 3.10.0-1.redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-apache-cxf +3 3.3.7-1.redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-artemis-native +1 1:1.0.2-3.redhat_1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-bouncycastle +3 1.65.0-1.redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-glassfish-jsf 2.3.9-11.SP12_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-hal-console 3.2.10-1.Final_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-hibernate +4 5.3.18-1.Final_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-httpcomponents-client 4.5.12-1.redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-httpcomponents-core 4.4.13-1.redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-jberet +1 1.3.7-1.Final_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-jboss-invocation 1.5.3-1.Final_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-jboss-logmanager 2.1.17-1.Final_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-jboss-server-migration +21 1.7.2-2.Final_redhat_00002.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-jboss-xnio-base 3.7.9-1.Final_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-jgroups 4.1.10-1.Final_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-narayana +10 5.9.9-1.Final_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-picketbox +1 5.0.3-8.Final_redhat_00007.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-picketlink-bindings +1 2.5.5-25.SP12_redhat_00013.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-snakeyaml 1.26.0-1.redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-undertow 2.0.31-1.SP1_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-velocity +1 2.2.0-1.redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-wildfly +2 7.3.3-4.GA_redhat_00004.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-wildfly-elytron +1 1.10.8-1.Final_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-wildfly-java-jdk8 +1 7.3.3-4.GA_redhat_00004.1.el7eap RHSA-2020:4246
Red Hat JBoss EAP 7 eap7-wildfly-transaction-client 1.1.13-1.Final_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-ws-commons-XmlSchema 2.2.5-1.redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244
Red Hat JBoss EAP 7 eap7-xerces-j2 2.12.0-2.SP03_redhat_00001.1.el6eap RHSA-2020:4246, RHSA-2020:4245, RHSA-2020:4244

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.cxf:cxf-rt-management < 3.2.13 3.2.13 GHSA-ffm7-7r8g-77xm
Maven org.apache.cxf:cxf-rt-management >= 3.3.0, < 3.3.6 3.3.6 GHSA-ffm7-7r8g-77xm

Advisories 4

References