{"action":"Upgrade org.apache.geronimo.framework:geronimo-jmx-remoting to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"3.0-beta-1"}],"component":"org.apache.geronimo.framework:geronimo-jmx-remoting","cve_ids":["CVE-2013-1777"],"ecosystem":"Maven","epss":0.09808,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-v64w-96p6-fx7w","id":"tcs_01M5N9DC08E81GJYXPF48SH801","modified_at":"2024-12-03T06:08:21.185199Z","published_at":"2022-05-17T04:48:11Z","references":["https://osv.dev/vulnerability/GHSA-v64w-96p6-fx7w","https://nvd.nist.gov/vuln/detail/CVE-2013-1777","https://github.com/apache/geronimo/commit/ee031c5e62b0d358250d06c2aa6722518579a6c5","https://github.com/apache/geronimo","https://issues.apache.org/jira/browse/GERONIMO-6477","http://archives.neohapsis.com/archives/bugtraq/2013-07/0008.html","http://geronimo.apache.org/30x-security-report.html","http://svn.apache.org/viewvc/geronimo/server/trunk","http://svn.apache.org/viewvc?view=revision&revision=1458113","http://www-01.ibm.com/support/docview.wss?uid=swg21643282"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-v64w-96p6-fx7w","url":"https://osv.dev/vulnerability/GHSA-v64w-96p6-fx7w"}],"summary":"Apache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.1"}