CVE-2018-1287

Description

In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.876

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-1297,CVE-2018-1287 are fixed in Apache-ApacheJMeter 4.0	Windows
Vulnerabilities CVE-2018-1297,CVE-2018-1287 are fixed in Apache-ApacheJMeter for Linux 4.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234