Aller au contenu
Se connecter
Non notée

CVE-2018-1287 In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard…

Description

In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache JMeter 3.x Pas de correctif indiqué
Apache JMeter 2.x Pas de correctif indiqué

Autres CVE de Apache JMeter

Les 3 CVE de Apache JMeter →
CVE-2019-0187 Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options) Non notée CVE-2018-1297 When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection Non notée
Suivre cette CVE