PT-2015-2776 · Apache · Apache Activemq

Steven Seeley · Published 2015-08-19 · Updated 2023-02-13 · CVE-2015-1830

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions 5.x through 5.11.1

Description The issue exists due to incorrect restriction of the directory path name with limited access in the file server upload/download functionality of Apache ActiveMQ. This allows a remote attacker to create JSP files in arbitrary directories, potentially leading to remote code execution.

Recommendations For Apache ActiveMQ versions 5.x through 5.11.1, update to version 5.11.2 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2015-12141

CVE-2015-1830

GHSA-3V63-F83X-37X4

ZDI-15-407

Affected Products

Apache Activemq

References · 19

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_activemq_traversal_upload.rb · Exploit
• 🔥 https://github.com/ysrc/xunfeng/blob/master/vulscan/vuldb/activemq_upload.py · Exploit
• 🔥 https://exploit-db.com/exploits/48181 · Exploit
• 🔥 https://exploit-db.com/exploits/40857 · Exploit
• https://bdu.fstec.ru/vul/2015-12141 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-407 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-1830 · Security Note
• https://osv.dev/vulnerability/GHSA-3v63-f83x-37x4 · Vendor Advisory
• https://github.com/apache/activemq · Note
• https://github.com/apache/activemq/commit/9fd5cb7dfe0fcc431f99d5e14206e0090e72f36b · Note
• https://github.com/apache/activemq/commit/729c4731574ffffaf58ebefdbaeb3bd19ed1c7b7 · Note
• https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E · Note
• http://zerodayinitiative.com/advisories/ZDI-15-407 · Note
• https://issues.apache.org/jira/browse/AMQ-5754 · Note
• http://packetstormsecurity.com/files/156643/Apache-ActiveMQ-5.11.1-Directory-Traversal-Shell-Upload.html · Note