CVE-2017-15709

Опубликовано: 13 фев. 2018

Источник: nvd

CVSS3: 3.7

CVSS2: 4.3

EPSS Средний

Описание

When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*

Версия от 5.14.0 (включая) до 5.15.2 (включая)

EPSS

Процентиль: 98%

0.22854

Средний

3.7 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2017-15709

CVSS3: 3.7

ubuntu

больше 8 лет назад

When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.

CVE-2017-15709

CVSS3: 3.5

redhat

больше 8 лет назад

When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.

CVE-2017-15709

CVSS3: 3.7

debian

больше 8 лет назад

When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 ...

GHSA-7qm4-p377-fr2r

CVSS3: 3.7

github

больше 4 лет назад

ActiveMQ's OpenWire protocol exposes certain system details as plain text

EPSS

Процентиль: 98%

0.22854

Средний

3.7 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200