Signature Detail
Short Name |
HTTP:APACHE:MOVE-DIRTRAV |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Apache ActiveMQ Fileserver MOVE Directory Traversal |
Release Date |
2016/06/21 |
Update Number |
2745 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Apache ActiveMQ Fileserver MOVE Directory Traversal
This signature detects attempts to exploit a known vulnerability against Apache ActiveMQ. This allows remote attackers to upload and execute arbitrary files.
Extended Description
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
Affected Products
- Apache activemq 5.13.3
References
- CVE: CVE-2015-1499
- CVE: CVE-2016-3088
- URL: http://securitytracker.com/id?1035951