Apache Camel's JMX is vulnerable to Rebind Flaw.

Summary

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.

Timeline

1. May 14, 2020, 4:18 PM UTCCVE published
2. Aug 4, 2024, 11:48 AM UTCRecord last updated
3. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• n/a Apache Camel

  Version range not reported

• org.apache.camel:camelMaven

  fixed in 3.2.0

• org.apache.camel:camel-coreMaven

  fixed in 3.2.0

• org.apache.camel:camel-managementMaven

  fixed in 3.2.0

References 15