PT-2015-5332 · Apache+1 · Activemq Broker+1

Andrea Micalizzi + 1 · Publicado 2015-02-10 · Atualizado 2017-09-08 · CVE-2015-1499

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Samsung Security Manager versions prior to 1.31

Description The issue allows remote attackers to delete arbitrary files, resulting in a denial of service, by sending a DELETE request to the ActiveMQ Broker in Samsung Security Manager.

Recommendations For versions prior to 1.31, update to version 1.31 or later to resolve the issue. As a temporary workaround, consider restricting access to the ActiveMQ Broker Service to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1499

ZDI-15-041

Produtos afetados

Activemq Broker

Samsung Security Manager

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/100918 · Nota
• https://zerodayinitiative.com/advisories/ZDI-15-041 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-1499 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-15-041 · Nota