PT-2016-3434 · Apache · Apache Activemq

Hillary Benson + 1 · Publicado 2016-05-24 · Atualizado 2026-06-09 · CVE-2016-3088

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions 5.x through 5.13.x

Description The issue exists due to insufficient input validation in the Fileserver web application. It allows a remote attacker to upload and execute arbitrary files via an HTTP PUT request followed by an HTTP MOVE request. This can be achieved by sending a PUT request to a vulnerable endpoint, such as /fileserver, and then sending a MOVE request to execute the uploaded file.

Recommendations For Apache ActiveMQ versions 5.x through 5.13.x, update to version 5.14.0 or later to resolve the issue. As a temporary workaround, consider disabling the HTTP MOVE method for the Fileserver web application until a patch is available. Restrict access to the Fileserver web application to minimize the risk of exploitation.

Exploit

Correção

RCE

Unrestricted File Upload

Enumeração de Fraquezas

CWE-20

CWE-434

Identificadores relacionados

BDU:2022-04782

CVE-2016-3088

GHSA-RXQH-FC23-GXP2

ZDI-16-356

ZDI-16-357

Produtos afetados

Apache Activemq

Referências · 44

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_upload_jsp.rb · Exploit
• 🔥 https://github.com/coffeehb/Some-PoC-oR-ExP/tree/master/ActiveMQExP · Exploit
• 🔥 https://github.com/gsheller/ActiveMQ_putshell-CVE-2016-3088 · Exploit
• 🔥 https://github.com/Ma1Dong/ActiveMQ_putshell-CVE-2016-3088 · Exploit
• 🔥 https://github.com/YutuSec/ActiveMQ_Crack · Exploit
• 🔥 https://github.com/cyberaguiar/CVE-2016-3088 · Exploit
• 🔥 https://github.com/cl4ym0re/CVE-2016-3088 · Exploit
• 🔥 https://exploit-db.com/exploits/42283 · Exploit
• 🔥 https://exploit-db.com/exploits/40857 · Exploit
• https://github.com/apache/activemq/commit/3dd86d04e8b90ba309819317d19e7260d414d9e7 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-3088 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-3088 · Aviso do Fabricante
• https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E · Correção
• https://osv.dev/vulnerability/GHSA-rxqh-fc23-gxp2 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-3088 · Aviso do Fabricante