CVE ID : CVE-2019-7727
JMX/RMI Nice ENGAGE <= 6.5 Remote Command Execution
description
===========
NICE Engage is an interaction recording
platform. The default configuration in versions <= 6.5 (and possible
higher) binds an unauthenticated JMX/RMI interface to all network
interfaces, without restricting registration of MBeans, which allows
remote attackers to execute arbitrary code via the RMI protocol by using
the JMX connector. The observed affected TCP port is 6338 but based on
product's configuration a different one could be vulnerable.
More details visiting: https://redtimmysec.wordpress.com/2019/03/26/jmx-rmi-multiple-applications-rce/