Log in Start free

Actively exploited · Published Jun 1, 2016 · Assigned by redhat

CVE-2016-3088

Critical 9.8 Exploited

In plain English

A critical-severity unrestricted file upload in ActiveMQ from Apache. Attackers are actively exploiting it in the wild (listed by CISA on February 10, 2022). The chance it is exploited in the next 30 days is estimated at 98.4% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)98.4%top 0.1% of all CVEs
Exploited in the wildYesCISA KEV since Feb 10, 2022
Attack tooling3Metasploit, Nuclei, Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Aug 10, 2022.

Official description

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12activemq5.14.0+dfsg-1DEBIAN-CVE-2016-3088
Debian:13activemq5.14.0+dfsg-1DEBIAN-CVE-2016-3088
Mavenorg.apache.activemq:activemq-client5.14.0GHSA-rxqh-fc23-gxp2

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References