Описание
When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 5.15.3-2 |
| cosmic | not-affected | 5.15.3-2 |
| devel | not-affected | 5.15.3-2 |
| esm-apps-legacy/xenial | not-affected | code not present |
| esm-apps/bionic | not-affected | 5.15.3-2 |
| esm-apps/xenial | not-affected | code not present |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [code not present]] |
| precise/esm | DNE | |
| trusty | not-affected | code not present |
Показывать по
EPSS
4.3 Medium
CVSS2
3.7 Low
CVSS3
Связанные уязвимости
When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.
When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.
When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 ...
ActiveMQ's OpenWire protocol exposes certain system details as plain text
EPSS
4.3 Medium
CVSS2
3.7 Low
CVSS3