CVE-2015-7559CWE-306

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class

Low · published August 1, 2019

CVSS v3.0
2.7
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.

The record
Technical detail
CVSS v3.0
2.7 · LOW
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01966 · 80.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2019-08-01T00:00Z
EPSS history
Timeline
  • 01 AUG 00:00Z
    It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class
    cvelistv5