CVE-2023-26269

Name of the Vulnerable Software and Affected Versions Apache James server versions 3.7.3 and earlier

Description The issue allows privilege escalation by a malicious local user due to the JMX management service being provided without authentication by default. Administrators are advised to take mitigation measures.

Recommendations For Apache James server versions 3.7.3 and earlier, disable JMX or set up a JMX password to mitigate the issue. For users upgrading to version 3.7.4 or later, no action is required as a JMX password will be set up automatically for Guice users.