KB-1970 Port 1099 network security vulnerability

pauline.delacruz — Wed, 24 Jan 2024 22:59:56 GMT

Current Revision posted to Appian Knowledge Base by pauline.delacruz on 1/24/2024 10:59:56 PM

Symptoms

Following a network vulnerability/security scan, reports indicate a violation on port 1099. The scan shows a remote Java JMX agent is configured without SSL client and password authentication.

Cause

The process listening on port 1099 is started by ActiveMQ to run the JMS broker. This process is started by default when Tomcat is started and exposes a JMX listener for monitoring/administration on port 1099 at startup.

Action

Shut down the application server.

Add the following line to custom.properties file in <APPIAN_HOME>/conf:

conf.jms.embeddedBrokerUrl=broker:(tcp://0.0.0.0:61616)?useJmx=false

Start the application server.

Affected Versions

This article applies to all versions earlier than 20.4 which use Tomcat as an application server.

Last Reviewed: January 2024

Tags: Tomcat, Security, application server, infrastructure, network

KB-1970 Port 1099 network security vulnerability

Parmida Borhani — Thu, 25 Jul 2019 00:33:48 GMT

Revision 4 posted to Appian Knowledge Base by Parmida Borhani on 7/25/2019 12:33:48 AM

Symptoms

Following a network vulnerability/security scan, reports indicate a violation on port 1099. The scan shows a remote Java JMX agent is configured without SSL client and password authentication.

Cause

Action

Shut down the application server.

Add the following line to custom.properties file in <APPIAN_HOME>/conf:

conf.jms.embeddedBrokerUrl=broker:(tcp://0.0.0.0:61616)?useJmx=false

Start the application server.

Affected Versions

This article applies to all versions of Appian using Tomcat as an application server.

Last Reviewed: July 2019

Tags: Tomcat, Security, application server, infrastructure, network

DRAFT KB-XXXX Port 1099 network security vulnerability

James Lee — Wed, 24 Jul 2019 14:43:53 GMT

Revision 3 posted to Appian Knowledge Base by James Lee on 7/24/2019 2:43:53 PM

Symptoms

Following a network vulnerability/security scan, reports indicate a violation on port 1099. The scan shows a remote Java JMX agent is configured without SSL client and password authentication.

Cause

Action

Shut down the application server.

Add the following line to custom.properties file in <APPIAN_HOME>/conf:

conf.jms.embeddedBrokerUrl=broker:(tcp://0.0.0.0:61616)?useJmx=false

Start the application server.

Affected Versions

This article applies to all versions of Appian using Tomcat as an application server.

Last Reviewed: July 2019

Tags: Tomcat, Security, application server, infrastructure, network

DRAFT KB-XXXX Port 1099 network security vulnerability

James Lee — Tue, 23 Jul 2019 21:54:30 GMT

Revision 2 posted to Appian Knowledge Base by James Lee on 7/23/2019 9:54:30 PM

Symptoms

Following a network vulnerability/security scan, reports indicate a violation on port 1099. The scan shows a remote Java JMX agent is configured without SSL client and password authentication.

Cause

Action

Shut down the application server.
Add the following lines to custom.properties file in <APPIAN_HOME>/conf:
```
conf.jms.embeddedBrokerUrl=broker:(tcp://0.0.0.0:61616)?useJmx=false
```
Restart the application server.

Affected Versions

This article applies to all versions of Appian using Tomcat as an application server.

Last Reviewed: July 2019

Tags: Security, application server, infrastructure

DRAFT KB-XXXX Port 1099 network security vulnerability

James Lee — Tue, 23 Jul 2019 21:12:34 GMT

Revision 1 posted to Appian Knowledge Base by James Lee on 7/23/2019 9:12:34 PM

Symptoms

Following a network vulnerability/security scan, reports indicate a violation on port 1099. Scan shows a remote Java JMX agent is configured without SSL client and password authentication.

Cause

The process listening on port 1099 is started by ActiveMQ to run the JMS broker. This process is started by default when we start Tomcat, and exposes a JMX listener for monitoring/administration on port 1099 at startup.

Action

Shut down the Appian application server.
Open the custom.properties file in <APPIAN_HOME>/conf

Add the following line:

conf.jms.embeddedBrokerUrl=broker:(tcp://0.0.0.0:61616)?useJmx=false

Restart the application server.

Affected Versions

This article applies to all versions of Appian using tomcat as an application server.

Last Reviewed: Month YYYY

Tags: Security, application server, infrastructure