[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6Zc6qoLKttcJi_3ZFngWhgf2zD0r7ws6wRFnjwoBOZA":3,"g5a-risk:CVE-2022-41678":140},{"success":4,"data":5,"meta":137},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":40,"references":41,"referencesCount":71,"weaknesses":72,"weaknessesCount":40,"isActivelyExploited":81,"cisaInfo":26,"otxData":26,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":121,"notableEvents":122},"CVE-2022-41678","What is CVE-2022-41678?","Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. \n\nIn details, in ActiveMQ configurations, jetty allows\norg.jolokia.http.AgentServlet to handler request to \u002Fapi\u002Fjolokia\n\norg.jolokia.http.HttpRequestHandler#handlePostRequest is able to\ncreate JmxRequest through JSONObject. And calls to\norg.jolokia.http.HttpRequestHandler#executeRequest.\n\nInto deeper calling stacks,\norg.jolokia.handler.ExecHandler#doHandleRequest can be invoked\nthrough refection. This could lead to RCE through via\nvarious mbeans. One example is unrestricted deserialization in jdk.management.jfr.FlightRecorderMXBeanImpl which exists on Java version above 11.\n\n1 Call newRecording.\n\n2 Call setConfiguration. And a webshell data hides in it.\n\n3 Call startRecording.\n\n4 Call copyTo method. The webshell will be written to a .jsp file.\n\nThe mitigation is to restrict (by default) the actions authorized on Jolokia, or disable Jolokia.\nA more restrictive Jolokia configuration has been defined in default ActiveMQ distribution. We encourage users to upgrade to ActiveMQ distributions version including updated Jolokia configuration: 5.16.6, 5.17.4, 5.18.0, 6.0.0.","Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolok...","2023-11-28T16:15:06.84","2025-11-03T22:16:00.52",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[],[],0.8581,[31,31,31,31,31,31,31],"High",[35],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"apache","activemq","*","cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",1,[42,47,51,55,59,61,63,67,69],{"url":43,"source":44,"tags":45},"https:\u002F\u002Factivemq.apache.org\u002Fsecurity-advisories.data\u002FCVE-2022-41678-announcement.txt","Apache",[46],"Vendor Advisory",{"url":48,"source":44,"tags":49},"https:\u002F\u002Flists.apache.org\u002Fthread\u002F7g17kwbtjl011mm4tr8bn1vnoq9wh4sl",[50,46],"Mailing List",{"url":52,"source":53,"tags":54},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240216-0004\u002F","Netapp",[],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F11\u002F28\u002F1","Openwall",[],{"url":43,"source":44,"tags":60},[46],{"url":48,"source":44,"tags":62},[50,46],{"url":64,"source":65,"tags":66},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F10\u002Fmsg00027.html","Debian",[],{"url":52,"source":53,"tags":68},[],{"url":56,"source":57,"tags":70},[],9,[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2022-41678? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-41678, a high severity cyber security vulnerability from 2023. High exploit probability (85.8%). Once an user is authentic...","CVE-2022-41678, CVE-2022-41678 vulnerability, CVE-2022-41678 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, apache security, activemq vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2022-41678",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-41678","Cybersecurity","CVE-2022-41678, CVE-2022-41678 vulnerability, CVE-2022-41678 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":26,"Negate":26,"Nodes":110},[111],{"Operator":112,"Negate":81,"CPEMatch":113},"OR",[114,117],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":116,"VersionEndIncluding":26},"2CD766F1-F0C9-4CFE-85F5-308248C6E44C","5.16.6",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":119,"VersionEndExcluding":120,"VersionEndIncluding":26},"B0D4F2D0-6707-47EA-BE24-D1B273EF5122","5.17.0","5.17.4",[],[123,130],{"id":124,"eventType":125,"eventTime":126,"details":127,"label":128,"color":129},"2a6d88a5-4d51-4646-8c28-c0748617f24a","HIGH_EPSS_DELTA","2025-06-11T10:10:27.738051+00:00","Daily EPSS score increased by 0.107 on 2023-12-30","EPSS Score Increased","red",{"id":131,"eventType":132,"eventTime":133,"details":134,"label":135,"color":136},"d5a67493-4226-429f-97f1-f875bf496d29","LOW_EPSS_DELTA","2025-11-22T04:05:21.298922+00:00","Daily EPSS score decreased by 0.134 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":138,"version":139},1792348057291,"2.0",{"score":141,"band":33,"action":142,"scoredAt":143},73,"Patch now","2026-10-16T06:59:56.196244+00:00"]