Skip to main content
pauline.delacruz
Employee
July 23, 2019

KB-1970 Port 1099 network security vulnerability

  • July 23, 2019
  • 0 replies
  • 6 views

Symptoms

Following a network vulnerability/security scan, reports indicate a violation on port 1099. The scan shows a remote Java JMX agent is configured without SSL client and password authentication.

Cause

The process listening on port 1099 is started by ActiveMQ to run the JMS broker. This process is started by default when Tomcat is started and exposes a JMX listener for monitoring/administration on port 1099 at startup.

Action

  1. Shut down the application server.
  2. Add the following line to custom.properties file in <APPIAN_HOME>/conf: 
    conf.jms.embeddedBrokerUrl=broker:(tcp://0.0.0.0:61616)?useJmx=false
  3. Start the application server.

Affected Versions

This article applies to all versions earlier than 20.4 which use Tomcat as an application server.

Last Reviewed: January 2024

Terms & ConditionsAccessibility statement