CVE-2023-51518

CRITICAL

9.8

Description

Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note that by default JMX endpoint is only bound locally. We recommend users to: - Upgrade to a non-vulnerable Apache James version - Run Apache James isolated from other processes (docker - dedicated virtual machine) - If possible turn off JMX

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie2/27/2024

Derniere modification5/5/2025

Sourcenvd

Observations honeypot0

Produits affectes

apache:james

Faiblesses (CWE)

CWE-502

References

https://lists.apache.org/thread/wbdm61ch6l0kzjn6nnfmyqlng82qz0or(security@apache.org)

https://lists.apache.org/thread/wbdm61ch6l0kzjn6nnfmyqlng82qz0or(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.