Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1258309 - (CVE-2015-1830) CVE-2015-1830 ActiveMQ: Path traversal leading to unauthenticated RCE
CVE-2015-1830 ActiveMQ: Path traversal leading to unauthenticated RCE
Status: CLOSED CURRENTRELEASE
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
impact=moderate,public=20150828,repor...
: Security
: 1258297 (view as bug list)
Depends On:
Blocks: 1257834
  Show dependency tree / graph
 
Reported: 2015-08-31 00:38 EDT by Jason Shepherd
Modified: 2016-01-22 10:11 EST (History)
2 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2015-08-31 00:40:29 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Jason Shepherd 2015-08-31 00:38:39 EDT 
Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.
Comment 1 Jason Shepherd 2015-08-31 00:39:27 EDT 
*** Bug 1258297 has been marked as a duplicate of this bug. ***
Comment 2 Jason Shepherd 2015-08-31 00:40:09 EDT 
This only affects the standalone version of ActiveMQ shipped with JBoss A-MQ. It is fixed in version 6.2.0.
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.