CVE-2023-51518

CRITICAL

9.8

Description

Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note that by default JMX endpoint is only bound locally. We recommend users to: - Upgrade to a non-vulnerable Apache James version - Run Apache James isolated from other processes (docker - dedicated virtual machine) - If possible turn off JMX

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published2/27/2024

Last Modified5/5/2025

Sourcenvd

Honeypot Sightings0

Affected Products

apache:james

Weaknesses (CWE)

CWE-502

References

https://lists.apache.org/thread/wbdm61ch6l0kzjn6nnfmyqlng82qz0or(security@apache.org)

https://lists.apache.org/thread/wbdm61ch6l0kzjn6nnfmyqlng82qz0or(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.