Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-1830
HistoryAug 19, 2015 - 12:00 a.m.

CVE-2015-1830

2015-08-1900:00:00
ubuntu.com
ubuntu.com
6

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.046 Low

EPSS

Percentile

92.6%

Directory traversal vulnerability in the fileserver upload/download
functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for
Windows allows remote attackers to create JSP files in arbitrary
directories via unspecified vectors.

Notes

Author Note
mdeslaur windows-specific issue

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.046 Low

EPSS

Percentile

92.6%