CVE-2020-11971 | SynScan

Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-11971

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.

Published: May 14, 2020
Updated: Nov 8, 2023
CVE: CVE-2020-11971
GHSA: GHSA-hfg5-xpvw-c9x4
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
apache / camel	2.22.0	3.1.0.x
oracle / flexcube_private_banking	12.1.0	12.1.0.x
oracle / flexcube_private_banking	12.0.0	12.0.0.x
oracle / enterprise_manager_base_platform	13.3.0.0	13.3.0.0.x
oracle / enterprise_manager_base_platform	13.4.0.0	13.4.0.0.x
oracle / communications_diameter_signaling_router	8.0.0	8.2.2.x
oracle / communications_diameter_intelligence_hub	8.0.0	8.1.0.x
oracle / communications_diameter_intelligence_hub	8.2.0	8.2.3.x
org.apache / camel	-	3.2.0
org.apache / camel-core	-	3.2.0
org.apache / camel-management	-	3.2.0