Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-1830
HistoryAug 19, 2015 - 12:00 a.m.

CVE-2015-1830

2015-08-1900:00:00
ubuntu.com
ubuntu.com
5

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.033 Low

EPSS

Percentile

91.3%

Directory traversal vulnerability in the fileserver upload/download
functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for
Windows allows remote attackers to create JSP files in arbitrary
directories via unspecified vectors.

Notes

Author Note
mdeslaur windows-specific issue

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.033 Low

EPSS

Percentile

91.3%