Paper/Archive/CVE-2016-3088

CVE-2016-3088

Apache ActiveMQ — Apache ActiveMQ Improper Input Validation Vulnerability

KEV · due 10 Aug EPSS 99%public exploit SSVC act CVSS 9.8

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 In CISA KEV+3030.0 EPSS percentile 99.9.999 × 2020.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refzerodayinitiative.com/advisories/ZDI-16-356 exploitexploit-db.com/exploits/42283 refzerodayinitiative.com/advisories/ZDI-16-357 refactivemq.apache.org/security-advisories.data/CVE-2016-3088-announcement.txt advisoryrhn.redhat.com/errata/RHSA-2016-2036.html refsecuritytracker.com/id/1035951 reflists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E reflists.apache.org/thread.html/f956ea38e4da2e2c1e7131e6f91e41754852f5a4861d1a14ca5ca78a%40%3Cusers.activemq.apache.org%3E reflists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3088 kevcisa.gov/known-exploited-vulnerabilities-catalog