CVE-2015-2342
VMware vCenter Server 5.0-5.5 and 6.0 - Remote Code Execution via JMX RMI MBean Registration
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2015-2342.
PoCs published by Metasploit, rocktheboat, Braden Thomas, juan vazquez, including Metasploit module auxiliary/scanner/misc/java_jmx_server.
AI-analyzed exploit summary This Metasploit module exploits an insecure Java JMX server configuration to achieve remote code execution by loading malicious classes from a remote HTTP URL. It targets JMX interfaces with disabled or weakly configured authentication.
Description
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.
Exploits (3)
This Metasploit module exploits an insecure Java JMX server configuration to achieve remote code execution by loading malicious classes from a remote HTTP URL. It targets JMX interfaces with disabled or weakly configured authentication.
This Metasploit module scans for Java JMX endpoints and detects insecure configurations that could lead to remote code execution. It performs RMI protocol checks and handshakes to identify vulnerable JMX MBean servers.
This Metasploit module exploits insecure Java JMX server configurations to achieve remote code execution by loading malicious classes from a remote HTTP URL. It targets JMX interfaces with disabled or weakly configured authentication.