CVE-2020-12760 : An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 20

An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7. The ActiveMQ channel configuration allowed for arbitrary deserialization of Java objects (aka ActiveMQ Minion payload deserialization), leading to remote code execution for any authenticated channel user regardless of its assigned permissions.

Published 2020-05-11 16:15:13

Updated 2020-05-13 17:42:40

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2020-12760

Opennms » Opennms Horizon
Versions before (<) 26.1.0
cpe:2.3:a:opennms:opennms_horizon:*:*:*:*:*:*:*:*
Matching versions
Opennms » Opennms Meridian
Versions from including (>=) 2019 and before (<) 2019.1.7
cpe:2.3:a:opennms:opennms_meridian:*:*:*:*:*:*:*:*
Matching versions
Opennms » Opennms Meridian
Versions before (<) 2018.1.19
cpe:2.3:a:opennms:opennms_meridian:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-12760

EPSS FAQ

0.35%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 68 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-12760

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P	8.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-12760

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-12760

https://www.opennms.com/en/blog/2020-04-29-opennms-meridian-2019-1-6-europa-released/

OpenNMS Meridian 2019.1.6 (Europa) Released – The OpenNMS Group, Inc.
Release Notes;Vendor Advisory
https://www.opennms.com/en/blog/2020-04-29-opennms-meridian-2018-1-18-wildfire-released/

OpenNMS Meridian 2018.1.18 (Wildfire) Released – The OpenNMS Group, Inc.
Release Notes;Vendor Advisory
https://www.opennms.com/en/blog/2020-04-29-opennms-horizon-26-0-1-luchador-released/

OpenNMS Horizon 26.0.1 (Luchador) Released – The OpenNMS Group, Inc.
Release Notes;Vendor Advisory
https://github.com/OpenNMS/opennms/releases/tag/opennms-26.0.1-1

Release OpenNMS Horizon 26.0.1 (Luchador) · OpenNMS/opennms · GitHub
Release Notes
https://issues.opennms.org/browse/NMS-12673

[NMS-12673] Authenticated RCE vulnerability via ActiveMQ Minion payload deserialization - The OpenNMS Issue Tracker
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-12760

Products affected by CVE-2020-12760

Exploit prediction scoring system (EPSS) score for CVE-2020-12760

CVSS scores for CVE-2020-12760

CWE ids for CVE-2020-12760

References for CVE-2020-12760