Skip to content
Sign in
Not rated

CVE-2018-1287 In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard…

Description

In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.

Affected products and versions

Product Affected versions Fixed in
Apache JMeter 3.x No fix stated
Apache JMeter 2.x No fix stated

Other CVEs of Apache JMeter

The 3 CVEs of Apache JMeter →
CVE-2019-0187 Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options) Not rated CVE-2018-1297 When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection Not rated
Track this CVE