Lucene search

K
nvd[email protected]NVD:CVE-2015-1830
HistoryAug 19, 2015 - 3:59 p.m.

CVE-2015-1830

2015-08-1915:59:00
CWE-22
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

9.4 High

AI Score

Confidence

High

0.046 Low

EPSS

Percentile

92.6%

Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.

Affected configurations

NVD
Node
apacheactivemqMatch5.0.0
OR
apacheactivemqMatch5.1.0
OR
apacheactivemqMatch5.2.0
OR
apacheactivemqMatch5.3.0
OR
apacheactivemqMatch5.3.1
OR
apacheactivemqMatch5.3.2
OR
apacheactivemqMatch5.4.0
OR
apacheactivemqMatch5.4.1
OR
apacheactivemqMatch5.4.2
OR
apacheactivemqMatch5.4.3
OR
apacheactivemqMatch5.5.0
OR
apacheactivemqMatch5.5.1
OR
apacheactivemqMatch5.6.0
OR
apacheactivemqMatch5.7.0
OR
apacheactivemqMatch5.8.0
OR
apacheactivemqMatch5.9.0
OR
apacheactivemqMatch5.9.1
OR
apacheactivemqMatch5.10.0
OR
apacheactivemqMatch5.10.1
OR
apacheactivemqMatch5.10.2
OR
apacheactivemqMatch5.11.0
OR
apacheactivemqMatch5.11.1
AND
microsoftwindows

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

9.4 High

AI Score

Confidence

High

0.046 Low

EPSS

Percentile

92.6%