CVE-2019-7727

Publicada el 23 abr 2019 · Actualizada el 04 ago 2024

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 3.9%

In NICE Engage through 6.5, the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, without restricting registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol by using the JMX connector. The observed affected TCP port is 6338 but, based on the product's configuration, a different one could be vulnerable.

Productos afectados

n/a · n/a

Referencias

http://seclists.org/fulldisclosure/2019/Apr/4 https://redtimmysec.wordpress.com/2019/03/26/jmx-rmi-multiple-applications-rce/https://seclists.org/bugtraq/2019/Apr/2