CVE-2017-15709
moderate-risk
Published 2018-02-13
When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.
Do I need to act?
!
65.7% chance of exploitation in next 30 days
EPSS score — higher than 34% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.7/10
Low
NETWORK
/ HIGH complexity
Affected Products (1)
Affected Vendors
References (16)
37
/ 100
moderate-risk
Severity
13/34 · Low
Exploitability
19/34 · Moderate
Exposure
5/34 · Minimal