What’s Vulnerable › Vulnerabilities
CVE-2020-1954
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 6.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-04-01 · updated 2026-06-17
Description
Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in-the-middle (MITM) style attack. An attacker on the same host can connect to the registry and rebind the entry to another server, thus acting as a proxy to the original. They are then able to gain access to all of the information that is sent and received over JMX.
Affected products
- Apache Software Foundation Apache CXF: before 3.2.13; from 3.3.0 before 3.3.6 — fixed in 3.2.13, 3.3.6
- NetApp OnCommand Workflow Automation: all versions
- SnapManager for Oracle: all versions
- Oracle Corporation Communications Diameter Signaling Router (DSR): from 8.0.0 through 8.2.2
- Oracle Communications Diameter Signaling Router Idih:: from 8.0.0 through 8.2.2
- Oracle Communications Element Manager: from 8.2.0 through 8.2.2
- Oracle Communications Session Report Manager: from 8.2.0 through 8.2.2
- Oracle Communications Session Route Manager: from 8.2.0 through 8.2.2
- Oracle Corporation Enterprise Manager Base Platform: 13.2.1.0
- Oracle Corporation PeopleSoft Enterprise PT PeopleTools: 8.56
How to fix
Upgrade to a fixed version: Apache Software Foundation Apache CXF 3.2.13, 3.3.6. Check the vendor advisory for mitigations.
References
- http://cxf.apache.org/security-advisories.data/CVE-2020-1954.txt.asc?version=1&modificationDate=1585730169000&api=v2
- https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E
- https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E
- https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
- https://security.netapp.com/advisory/ntap-20220210-0001/
- https://www.oracle.com/security-alerts/cpuoct2020.html
- http://cxf.apache.org/security-advisories.data/CVE-2020-1954.txt.asc?version=1&modificationDate=1585730169000&api=v2
- https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E
- https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E
- https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
- https://security.netapp.com/advisory/ntap-20220210-0001/
- https://www.oracle.com/security-alerts/cpuoct2020.html
Get alerted when CVE-2020-1954 or the next vulnerability affects your stack