CVE-2020-5396 JMX Insecure Default Configuration in GemFire
A malicious user can achieve remote code execution via JMX MLet mbean creation when GemFire is deployed without a SecurityManager.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-5396?
CVE-2020-5396 is a high-severity vulnerability in VMware GemFire, published on 31 Jul 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service available which contains an insecure default configuration. This allows a malicious user to create an MLet mbean leading to remote code execution.
Which versions are affected by CVE-2020-5396?
It affects 2 products.
Products include Vmware Gemfire, Vmware Tanzu Gemfire for Virtual Machines.
How do I fix CVE-2020-5396?
No fix has been published for CVE-2020-5396 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-5396 being exploited?
There is no known exploitation of CVE-2020-5396 in the wild and no public exploit code.
Other vulnerabilities in VMware GemFire
Sources
Also known as GHSA-3g3v-fjwj-v857.