CVE-2015-1830

Publication date 19 August 2015

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.

Read the notes from the security team

Status

Package Ubuntu Release Status
activemq 15.10 wily
Not affected
15.04 vivid Ignored end of life
14.04 LTS trusty Not in release
12.04 LTS precise
Not affected

Notes

mdeslaur

windows-specific issue

References

Other references