PoC Index

CVE-2017-15709

MEDIUM 4.3EPSS 22.9%

When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.

CVSS v3.0
3.7 LOWCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v3.0
3.7 LOWCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v2.0
4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
22.85% chance of exploitation in the next 30 days, 98th percentile
Published
2018-02-13
Updated
2024-09-16

Exploit collections (1)

References

Related