Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of "man in the middle" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to
    send mails via SMTPS. To reduce the risk of "man in the middle" attacks additional server identity checks
    must be performed when accessing mail servers. For compatibility reasons these additional checks are
    disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail
    1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks
    nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the
    property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support
    for enabling server identity checks and these checks are enabled by default. -
    https://javaee.github.io/javamail/docs/SSLNOTES.txt -
    https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html -
    https://github.com/eclipse-ee4j/mail/issues/429 (CVE-2021-44549)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8884 advisory.

    Jenkins is a continuous integration server that monitors executions of repeated     jobs, such as building a software project or jobs run by cron.

    Security Fixes:

    * jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)
    * jenkins: Exposure of multi-line secrets through error messages (CVE-2024-47803)
    * jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)
    * jenkins: Denial of service when processing a specially crafted Spring Expression Language expression     (CVE-2024-38808)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments,     and other related information, refer to the CVE page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8886 advisory.

    Jenkins is a continuous integration server that monitors executions of repeated     jobs, such as building a software project or jobs run by cron.

    Security Fix(es):

    * jenkins: Exposure of multi-line secrets through error messages (CVE-2024-47803)
    * jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)
    * jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)
    * jenkins: Denial of service when processing a specially crafted Spring Expression Language expression     (CVE-2024-38808)
    * jenkins-2-plugins: jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies     (CVE-2024-34144)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments,     and other related information, refer to the CVE page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8885 advisory.

    Jenkins is a continuous integration server that monitors executions of repeated     jobs, such as building a software project or jobs run by cron.

    Security Fixes:

    * jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)
    * jenkins: Exposure of multi-line secrets through error messages     (CVE-2024-47803)
    * jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)
    * jenkins: Denial of service when processing a specially crafted Spring Expression Language expression     (CVE-2024-38808)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments,     and other related information, refer to the CVE page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8887 advisory.

    Jenkins is a continuous integration server that monitors executions of repeated     jobs, such as building a software project or jobs run by cron.

    Security Fix(es):

    * jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)
    * jenkins: Exposure of multi-line secrets through error messages     (CVE-2024-47803)
    * jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication     (CVE-2021-44549)
    * jenkins: Denial of service when processing a specially crafted Spring Expression Language expression     (CVE-2024-38808)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments,     and other related information, refer to the CVE page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fd538d14-5778-4764-b321-2ddd61a8a58f advisory.

    Red Hat reports:
    A vulnerability was found in Apache Sling Commons Messaging                 Mail(angus-mail), which provides a simple interface for sending                 emails via SMTPS in OSGi, does not offer an option to enable                 server identity checks, leaving connections vulnerable to                 man-in-the-middle attacks and can allow insecure email                 communication.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
413703	SCA: security update for org.apache.sling:org.apache.sling.commons.messaging.mail (GHSA-c69w-jj56-834w)	Tenable Cloud Security	SCA Checks	high
413703	SCA: security update for org.apache.sling:org.apache.sling.commons.messaging.mail (GHSA-c69w-jj56-834w)	Tenable Self-Hosted Container Security	SCA Checks	high
210367	RHEL 8 : Red Hat Product OCP Tools 4.15 Openshift Jenkins (RHSA-2024:8884)	Nessus	Red Hat Local Security Checks	high
210366	RHEL 8 : Red Hat Product OCP Tools 4.12 Openshift Jenkins (RHSA-2024:8886)	Nessus	Red Hat Local Security Checks	high
210365	RHEL 8 : Red Hat Product OCP Tools 4.14 Openshift Jenkins (RHSA-2024:8885)	Nessus	Red Hat Local Security Checks	high
210364	RHEL 8 : Red Hat Product OCP Tools 4.13 Openshift Jenkins (RHSA-2024:8887)	Nessus	Red Hat Local Security Checks	high
210008	FreeBSD : keycloak -- Missing server identity checks when sending mails via SMTPS (fd538d14-5778-4764-b321-2ddd61a8a58f)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2021-44549

high

Tenable Plugins

high

high

high

high

high

high

high