Apache James server: Privilege escalation via JMX pre-authentication deserialization

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-51518 · ADVISORY
• lists.apache.org/thread/wbdm61ch6l0kzjn6nnfmyqlng82qz0or · WEB

Lỗ hổng khác của org.apache.james:james-server

• CVE-2023-51747CAO 7.1Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter handling might create…
• CVE-2022-45935TRUNG BÌNH 5.5Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user da…
• CVE-2022-28220CAO 7.5Apache James prior to release 3.6.3 and 3.7.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. Fix of CVE-202…
• CVE-2022-22931TRUNG BÌNH 4.3Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store …
• CVE-2021-40525NGHIÊM TRỌNG 9.1Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading…