CVE-2010-1587

CVE-2010-1587

Published · Updated

Follow this CVE+ Monitor org.apache.activemq:activemq-web-console

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 78%
from disclosure to weaponsame day
Published on NVDApr 28
1st PoCApr 22
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Not affected
1 product — because the vulnerable code is not present in the product
red_hat_products
The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.