Improper Input Validation in Apache ActiveMQ
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-3088US | critical9.8OT critical | KEV | ||
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. | ||||
02
references
External citations — patches, advisories, analysis.
- http://activemq.apache.org/security-advisories.data/CVE-2016-3088-announcement.txtWEB
- http://rhn.redhat.com/errata/RHSA-2016-2036.htmlWEB
- http://www.securitytracker.com/id/1035951WEB
- http://www.zerodayinitiative.com/advisories/ZDI-16-356WEB
- http://www.zerodayinitiative.com/advisories/ZDI-16-357WEB
- https://github.com/apache/activemq/commit/3dd86d04e8b90ba309819317d19e7260d414d9e7WEB
- https://issues.apache.org/jira/browse/AMQ-6276WEB
- https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3EWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan