The vulnerability of the Fileserver application of the Apache ActiveMQ software platform, which allows a hacker to download and execute any file they desire.

🗓️ 04 Aug 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

ActiveMQ Fileserver flaw enables uploading and executing any file via HTTP PUT and MOVE due to input validation.

Reporter	Title	Published	Views	Family All 64
0day.today	Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution Vulnerabilities	3 Dec 201600:00	–	zdt
0day.today	Apache ActiveMQ < 5.14.0 - Web Shell Upload Exploit	30 Jun 201700:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable due to Log4j 1.2 SocketServer Remote Code Execution and Deserialization of Untrusted Data	24 Jun 202511:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	2 May 202412:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues	26 Mar 202503:44	–	ibm
Gitee	Exploit for Improper Input Validation in Apple Mac_Os_X	18 Nov 201916:59	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq	19 Sep 201915:47	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq	14 Sep 202517:06	–	gitee

Vulners

Node

red_hat jboss_a-mqMatch6.3

OR

red_hat red_hat_jboss_fuseMatch6

OR

red_hat jboss_a-mqMatch6.0

OR

apache activemqRange5.0.0–5.14

OR

red_hat red_hat_jboss_fuseMatch6.2

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-3088
exploit-db	www.exploit-db.com/exploits/42283/
activemq	www.activemq.apache.org/security-advisories.data/CVE-2016-3088-announcement.txt
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 39.8

CVSS 210

EPSS0.94281

ActiveMQ Fileserver flaw Input validation Put request Move request File upload File execution