Mitigating CVE-2023-33544 in ConnectALL

Products

• ConnectAll On-Prem
• ConnectALL

Issue/Introduction

This article describes steps to mitigate CWE-287 / CVE-2023-33544

Resolution

Navigate to CONNECTALL_HOME/Core/conf directory

Open the application.properties file in an editor

There will be two lines that look like this:

management.endpoints.web.exposure.include=hawtio,jolokia
spring.jmx.enabled=true 

Update the lines to look like the following:

management.endpoints.web.exposure.include=
spring.jmx.enabled=false

 

You will need to restart the ConnectALL services for this to take effect.