Remote Code Execution Vulnerability in Apache ActiveMQ

CVE-2020-13920

Summary

Apache ActiveMQ uses LocateRegistry.createRegistry() to create a JMX RMI registry, allowing unauthenticated access to the 'jmxrmi' entry. An attacker can exploit this by connecting to the registry and utilizing the rebind method to redirect 'jmxrmi' to a malicious server. This scenario can lead to man-in-the-middle attacks, enabling the attacker to potentially intercept sensitive user credentials when they connect to the original server. To mitigate this vulnerability, it is essential to upgrade to Apache ActiveMQ version 5.15.12 or later.

References