Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:10:46 +0000 CVE-2020-11980 https://cve.radiocsirt.org/vuln/cve-2020-11980 <p><strong>Affected:</strong> Apache Karaf</p> <p>In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an &#34;admin&#34; can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a &#34;viewer&#34; role. In the &#39;etc/jmx.acl.cfg&#39;, such as role can call get*. It&#39;s possible to authenticate as a viewer role + invokes on the MLet getMBeansFromURL method, which goes off to a remote server to fetch the desired MBean, which is then registered in Karaf. At this point the attack fails as &#34;viewer&#34; doesn&#39;t have the permission to invoke on the MBean. Still, it could act as a SSRF style attack and also it essentially allows a &#34;viewer&#34; role to pollute the MBean registry, which is a kind of privilege escalation. The vulnerability is low as it&#39;s possible to add a ACL to limit access. Users should update to Apache Karaf 4.2.9 or newer.</p> <p><strong>Affected:</strong> Apache Karaf</p> <p>In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an &#34;admin&#34; can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a &#34;viewer&#34; role. In the &#39;etc/jmx.acl.cfg&#39;, such as role can call get*. It&#39;s possible to authenticate as a viewer role + invokes on the MLet getMBeansFromURL method, which goes off to a remote server to fetch the desired MBean, which is then registered in Karaf. At this point the attack fails as &#34;viewer&#34; doesn&#39;t have the permission to invoke on the MBean. Still, it could act as a SSRF style attack and also it essentially allows a &#34;viewer&#34; role to pollute the MBean registry, which is a kind of privilege escalation. The vulnerability is low as it&#39;s possible to add a ACL to limit access. Users should update to Apache Karaf 4.2.9 or newer.</p> https://cve.radiocsirt.org/vuln/cve-2020-11980