Samsung Security Manager ActiveMQ Broker Service Multiple Vulnerabilities (CVE-2015-1499)

Multiple policy bypass vulnerabilities have been reported in Samsung Security Manager. The vulnerabilities are due to the permitting of unauthenticated PUT, MOVE and DELETE requests on the server. A remote unauthenticated attacker could exploit this vulnerability by sending a PUT, MOVE or DELETE...

HTTP Methods (CAN-2003-0109; CVE-2007-1560; CVE-2015-1499)

...

CVE-2015-1499

The CVE-2015-1499 entry concerns the Samsung Security Manager (SSM) ActiveMQ Broker. Affected version: SSM before 1.31. Vulnerability arises in the ActiveMQ Broker where remote attackers can delete arbitrary files via a DELETE request, enabling a denial-of-service condition. Public-source details...