Описание
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| activemq | fixed | 5.14.0+dfsg-1 | package | |
| activemq | not-affected | jessie | package | |
| activemq | not-affected | wheezy | package |
Примечания
http://activemq.apache.org/security-advisories.data/CVE-2016-3088-announcement.txt
EPSS
Связанные уязвимости
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
Уязвимость приложения Fileserver программной платформы Apache ActiveMQ, позволяющая нарушителю загрузить и выполнить произвольный файл
EPSS