PT-2015-5332 · Apache+1 · Activemq Broker+1

Andrea Micalizzi + 1 · Published 2015-02-10 · Updated 2017-09-08 · CVE-2015-1499

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Samsung Security Manager versions prior to 1.31

Description The issue allows remote attackers to delete arbitrary files, resulting in a denial of service, by sending a DELETE request to the ActiveMQ Broker in Samsung Security Manager.

Recommendations For versions prior to 1.31, update to version 1.31 or later to resolve the issue. As a temporary workaround, consider restricting access to the ActiveMQ Broker Service to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-1499

ZDI-15-041

Affected Products

Activemq Broker

Samsung Security Manager

References · 4

• https://zerodayinitiative.com/advisories/ZDI-15-041 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-1499 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100918 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-041 · Note