Skip to content
Sign in
Not rated

CVE-2018-1297 When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection

Description

When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.

Affected products and versions

Product Affected versions Fixed in
Apache JMeter 3.x No fix stated
Apache JMeter 2.x No fix stated

Other CVEs of Apache JMeter

The 3 CVEs of Apache JMeter →
CVE-2019-0187 Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options) Not rated CVE-2018-1287 In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard… Not rated
Track this CVE