Apache ActiveMQ RestFilter Directory Traversal Remote Code Execution Vulnerability

ID ZDI-15-407
Type zdi
Reporter Steven Seeley of Source Incite
Modified 2015-11-09T00:00:00


This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apache ActiveMQ. Authentication is not required to exploit this vulnerability.

The specific flaw exists within ActiveMQ fileserver web application. By issuing specially crafted requests, an attacker can create an arbitrary file on the server with attacker controlled data. An attacker can leverage this vulnerability to execute code under the context of the user.