Security Advisory

CVE-2023-26269

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-04-03 07:59:13

Last updated 2025-02-13 16:44:53

Assigner apache

CVSS score not scored

State PUBLISHED

Description

Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege escalation by a malicious local user. Administrators are advised to disable JMX, or set up a JMX password. Note that version 3.7.4 onward will set up a JMX password automatically for Guice users.

← Browse all CVEs View on cve.org ↗